clinical-decision-support
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted patient data from external CSV and JSON files to perform biomarker stratification and clinical reporting.
- Ingestion points: Data entering the agent context via scripts like
biomarker_classifier.pyandcreate_cohort_tables.py. - Boundary markers: No explicit delimiters or instructions are used to distinguish processed data from the agent's instructions.
- Capability inventory: The skill utilizes
Read,Write,Edit, andBashtools. - Sanitization: The provided validation script focuses on HIPAA compliance rather than sanitizing against adversarial prompt instructions.
- [EXTERNAL_DOWNLOADS]: The documentation specifies dependencies on several well-known Python packages for data analysis.
- Evidence:
README.mdandSKILL.mdlistpandas,numpy,scipy,lifelines,matplotlib, andpyyaml. - Note: These are trusted libraries commonly used in scientific research.
Audit Metadata