risk-management-specialist

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes Python scripts (fmea_analyzer.py and risk_matrix_calculator.py) designed to be run from the command line. These scripts perform mathematical calculations for Risk Priority Numbers (RPN) and risk matrix indexing. Analysis of the source code shows they handle data locally and do not involve network requests, sensitive file access, or privilege escalation.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided inputs regarding medical device hazards and failure modes (e.g., through interactive scripts or data ingestion).
  • Ingestion points: User input via CLI arguments or JSON files in scripts/fmea_analyzer.py and scripts/risk_matrix_calculator.py.
  • Boundary markers: None explicitly defined in the prompts, though the scripts use standard data parsing.
  • Capability inventory: Local file reading (input data), local stdout writing, and mathematical computation.
  • Sanitization: Standard Python argparse and json.load() validation. As the output is primarily for medical risk documentation and not passed to further automated execution environments, the risk of injection affecting system integrity is negligible.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 02:33 PM
Security Audit — agent-trust-hub — risk-management-specialist