leave-tracker
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill performs its primary function of tracking leave deadlines using specific local files. No evidence of malicious behavior, command execution, or network exfiltration was found.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from
leave-register.yaml. While this presents a vulnerability surface for indirect prompt injection, the skill does not have access to sensitive tools (network, subprocess) that would allow for exploitation of such an injection.
Audit Metadata