abridge-local-dev-loop
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the HAPI FHIR server image (
hapiproject/hapi) from Docker Hub. This is a well-known open-source tool used widely in the healthcare industry for simulating Electronic Health Record (EHR) environments. - [COMMAND_EXECUTION]: Executes
docker runanddocker startcommands to initialize and manage a local FHIR server. These commands are restricted to thedockernamespace in the skill configuration and are necessary for the development workflow. - [INDIRECT_PROMPT_INJECTION]: The skill handles clinical transcript data that is eventually processed by an AI service, creating a potential surface for indirect injection.
- Ingestion points: The system ingests clinical transcript text defined in
fixtures/transcripts/index.ts. - Boundary markers: The implementation does not use specific delimiters or instructions to ignore embedded prompts within the transcript data.
- Capability inventory: The skill has the capability to write configuration files, manage Docker containers, and perform network operations via
axios. - Sanitization: Transcript content is processed without specific sanitization or validation for potential malicious instructions before transmission to the sandbox API.
Audit Metadata