implement-calculator-pattern
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill generates code that ingests application data through 'entity' and 'order' objects (Ingestion points: PricingCalculator::Factory.for(entity) in SKILL.md and BaseService#initialize(order) in IMPLEMENTATION.md). No boundary markers or sanitization procedures are defined in the templates. However, the capability inventory indicates an absence of dangerous operations such as dynamic code evaluation, file writing, or network access, rendering the surface safe for its intended purpose.
- [SAFE]: All implementation and testing templates follow standard software engineering practices. No evidence of obfuscation, credential theft, or unauthorized remote code execution was found.
Audit Metadata