business-report
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [SAFE]: The skill consists solely of natural language instructions for the AI agent to draft and format documents. No malicious patterns, obfuscation, or safety bypass attempts were found.
- [NO_CODE]: The skill does not include any executable scripts, binaries, or configuration files that could trigger unauthorized actions.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data (attached or referenced files), which creates a standard vulnerability surface for indirect prompt injection.
- Ingestion points: Processes content from user-provided attachments and referenced documents as described in SKILL.md.
- Boundary markers: No explicit delimiters or 'ignore instructions' warnings are provided for the ingested content.
- Capability inventory: The instructions are limited to prose and document structure generation; no shell commands, network operations, or privileged file-system access are included.
- Sanitization: No content sanitization or input validation routines are specified.
Audit Metadata