abridge-local-dev-loop

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches the HAPI FHIR server image (hapiproject/hapi) from Docker Hub. This is a well-known open-source tool used widely in the healthcare industry for simulating Electronic Health Record (EHR) environments.
  • [COMMAND_EXECUTION]: Executes docker run and docker start commands to initialize and manage a local FHIR server. These commands are restricted to the docker namespace in the skill configuration and are necessary for the development workflow.
  • [INDIRECT_PROMPT_INJECTION]: The skill handles clinical transcript data that is eventually processed by an AI service, creating a potential surface for indirect injection.
  • Ingestion points: The system ingests clinical transcript text defined in fixtures/transcripts/index.ts.
  • Boundary markers: The implementation does not use specific delimiters or instructions to ignore embedded prompts within the transcript data.
  • Capability inventory: The skill has the capability to write configuration files, manage Docker containers, and perform network operations via axios.
  • Sanitization: Transcript content is processed without specific sanitization or validation for potential malicious instructions before transmission to the sandbox API.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 01:13 AM