sexual-health

Pass

Audited by Gen Agent Trust Hub on Jul 1, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE]: The skill manages highly sensitive personal health information (PHI), including STD results, sexual function scores (IIEF-5 and FSFI), and medication usage, which it stores in a local file at data/sexual-health-tracker.json. This creates a local record of highly private information. \n- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided notes and data that are later re-read for status and trend operations, creating a surface for indirect prompt injection. \n
  • Ingestion points: User input parsed into health records and retrieval of data from data/sexual-health-tracker.json. \n
  • Boundary markers: Absent; the instructions do not implement specific delimiters to isolate stored data from the agent's instructions. \n
  • Capability inventory: Use of Read and Write tools to modify local file system data. \n
  • Sanitization: There is no explicit sanitization or escaping of user-provided strings before they are persisted or re-integrated into the session context.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 1, 2026, 05:26 AM
Security Audit — agent-trust-hub — sexual-health