skill-gap-analysis
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes restricted Bash commands for non-sensitive operations such as checking file existence and generating timestamps. These are limited to the 'test' and 'date' utilities as specified in the platform configuration.
- [PROMPT_INJECTION]: The skill processes untrusted data from inventory and profile files. While this presents an indirect prompt injection surface, the skill is limited to local data processing and report generation.
- Ingestion points:
skills/inventory.mdandskills/target-profile.md(SKILL.md) - Boundary markers: None specified in the instructions.
- Capability inventory: Uses
ReadandWritetools to manage local files (SKILL.md). - Sanitization: No explicit content validation or sanitization logic is present.
Audit Metadata