fhir-ig-translation
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install a sibling tool from the author's official GitHub repository (
forschungsgruppe-digital-health/agent-skills). This is a legitimate extension of the skill's capabilities within the vendor's ecosystem. - [DYNAMIC_EXECUTION]: The script
scripts/ig-translate.shcontains an embedded Python script for parsing local JSON files. This execution is scoped to the local environment and uses standard libraries to handle project metadata. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests project-specific data. 1. Ingestion points: The skill reads files from
fsh-generated/resources/*.jsonandinput/pagecontent/*.md. 2. Boundary markers: No explicit delimiters or safety warnings are used for the content of these files. 3. Capability inventory: The skill utilizesBashfor running the bundled translation helper andWritetools as defined inSKILL.md. 4. Sanitization: The helper script uses standard Pythonjson.loadfor parsing resource data, which provides basic structural validation.
Audit Metadata