policy-compliance
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns such as prompt injection, data exfiltration, or unauthorized command execution were detected. The skill uses standard document and spreadsheet tools for its core functionality.\n- [INDIRECT_PROMPT_INJECTION]: The skill acts as a template for processing user-provided business scenarios, which is a potential surface for indirect prompt injection.\n
- Ingestion points: User-provided business descriptions, data categories, and roles are processed in the workflow (SKILL.md).\n
- Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands in the user input.\n
- Capability inventory: The skill has the ability to create and modify Word and Excel documents using platform tools.\n
- Sanitization: No explicit sanitization or filtering of user-provided content is performed before document generation.
Audit Metadata