occupational-health-analyzer
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to read and analyze local health data files to provide risk assessments. No malicious behaviors or obfuscation techniques were detected.
- [DATA_EXPOSURE]: The skill accesses local JSON files in the
data-example/directory, which is necessary for its stated purpose. There are no network tools enabled or instructions to send this data to external services. - [COMMAND_EXECUTION]: The skill uses file manipulation tools (Read, Write, Edit) for data management but does not invoke shell commands, subprocesses, or dynamic code execution.
- [PROMPT_INJECTION]: The instructions focus on health analysis logic and do not contain patterns designed to bypass safety filters or override system instructions.
- [SAFE]: (Indirect Prompt Injection) The skill ingests data from external JSON files (e.g.,
occupational-health-tracker.json) in Step 1. While there are no explicit boundary markers or sanitization logic mentioned to prevent instructions embedded in these files from influencing the agent, the skill lacks high-risk capabilities like network access or shell execution, which mitigates the risk profile.
Audit Metadata