pricing-validation

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a guide for pricing validation and includes a Python-based calculator for statistical analysis. It does not perform unauthorized network operations, file access, or persistence mechanisms.
  • [INDIRECT_PROMPT_INJECTION]: The skill includes an ingestion surface where users provide pricing data for analysis. Ingestion points: The van-westendorp command accepts a data_file argument, and various CLI options like --prices and --responses accept user input. Boundary markers: The skill instructions do not specify explicit delimiters for user data, but the processing script expects structured numerical input. Capability inventory: The script's capabilities are limited to reading local JSON files and printing analysis results to the console. Sanitization: The script in main.py effectively sanitizes inputs by splitting string values and casting them to float types (float(x.strip())), which prevents command or instruction injection into the application logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:26 PM