capa-officer
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied JSON data files and interactive terminal input, which represents an attack surface for indirect prompt injection if the data contains malicious instructions for the agent.
- Ingestion points: The
scripts/capa_tracker.pyandscripts/root_cause_analyzer.pyscripts ingest data fromcapas.json,investigation.json, and interactive prompts. - Boundary markers: The skill does not implement explicit delimiters or instructions to the agent to ignore potentially malicious content embedded within the processed data.
- Capability inventory: The skill is restricted to local file reading and standard console output; it does not possess capabilities for network operations, file system modification, or shell command execution.
- Sanitization: No specific sanitization or filtering is performed on the ingested data to prevent it from influencing the agent's behavior.
Audit Metadata