skin-health-analyzer

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a structured set of instructions designed for analyzing skin health data. No indicators of prompt injection, data exfiltration, or unauthorized command execution were found in the skill body or metadata.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external health-related data, which constitutes a potential attack surface for indirect prompt injection. However, this is associated with the primary purpose of the skill and no exploitable pattern was detected.
  • Ingestion points: Skin health data, nutrition records, chronic disease history, and medication data provided by the user (SKILL.md).
  • Boundary markers: Absent. The instructions do not define specific delimiters for separating user data from system prompts.
  • Capability inventory: The skill is authorized to use standard tools like claude-code and codex-cli.
  • Sanitization: Absent. There are no instructions for sanitizing or validating the content of the ingested health records.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 02:07 PM
Security Audit — agent-trust-hub — skin-health-analyzer