disaster-recovery-bcp
Pass
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions and associated files do not exhibit any malicious patterns, credential harvesting, or unauthorized network operations.
- [COMMAND_EXECUTION]: The skill workflow involves executing a local Python script ('scripts/disaster_recovery_bcp_diagnostics.py') to process CSV performance data. This execution is standard for the skill's diagnostic purpose and does not involve suspicious shell commands.
- [PROMPT_INJECTION]: The skill ingests untrusted data from a CSV file (ingestion point: 'input.csv' in 'SKILL.md'). Boundary markers are absent in the prompt interpolation. The capability inventory includes the 'python' command execution. Sanitization is present in the diagnostic script via 'pd.to_numeric' and 'pd.to_datetime' conversion, ensuring untrusted content is treated as numeric data rather than instructions.
Audit Metadata