sec-fundamental-anomaly-detection
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external CSV data for diagnostic analysis. This creates an attack surface where malicious instructions could be embedded within the source data.
- Ingestion points: The
scripts/sec_fundamental_anomaly_detection_diagnostics.pyscript reads from aninput.csvfile supplied as a command-line argument. - Boundary markers: There are no explicit boundary markers or instructions to the agent to ignore natural language commands found within the CSV data fields (e.g.,
source_name). - Capability inventory: The skill includes file-writing capabilities (creating
diagnostics.json) and complex data processing via thepandaslibrary. - Sanitization: The Python script performs basic data type conversion and missing column checks but does not sanitize text fields against potential prompt injection payloads.
Audit Metadata