myndigheter-monitoring
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches public data workbooks (Excel, JSON) from the official Swedish Agency for Public Management website (statskontoret.se) to provide grounding for agency performance assessments.
- [COMMAND_EXECUTION]: The instructions specify the use of the
tsxexecution environment to run local management scripts (e.g.,scripts/statskontoret-fetch.ts) for data discovery and local persistence. - [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for ingesting external data from government reports into the agent's context and derived documents. 1. Ingestion points: External Excel and JSON data files fetched from
www.statskontoret.se. 2. Boundary markers: The instructions do not provide explicit delimiters or instructions to treat this ingested content as untrusted data. 3. Capability inventory: The skill utilizes local scripts viatsxto process data and automate the generation of implementation feasibility reports. 4. Sanitization: No specific input validation or sanitization mechanisms for the external data are detailed in the skill instructions.
Audit Metadata