fedramp-20x-expert
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill mentions synchronizing machine-readable policy requirements from official government sources. Both the description and body reference an external FedRAMP documentation repository as the source for JSON-formatted policy data.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data (JSON-formatted policies) which represents a potential ingestion surface for indirect prompt injection.
- Ingestion points: Data is retrieved from the official FedRAMP/docs repository as noted in the SKILL.MD description and machine-readable policies section.
- Boundary markers: The instructions do not define specific delimiters or instructions for the agent to ignore embedded commands within the ingested JSON data.
- Capability inventory: The skill is configured with access to tools including file system operations (Read, Glob, Grep, Write), network access (WebFetch), and shell command execution (Bash).
- Sanitization: No explicit sanitization or validation routines for external content are described in the skill metadata or body.
Audit Metadata