mortgage-trid-timeline-checklist
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains no executable code, scripts, or subprocess calls. It functions entirely as a set of markdown-based instructional guidelines and a verification checklist.
- [SAFE]: External references are limited to the author's domain (deciqai.com) and GitHub organization (github.com/deciqAI) for documentation and project information. These are legitimate vendor resources and do not involve data exfiltration or remote code execution.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process mortgage application data (such as Loan Estimate and Closing Disclosure details). While this constitutes an ingestion surface for untrusted external data, the skill lacks the necessary capabilities (such as file system access, network operations, or shell execution) to facilitate a meaningful exploit. The risk is considered minimal due to the absence of exploitable tools.
Audit Metadata