org-chart-creator
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input while maintaining access to powerful system tools, creating a vulnerability surface for indirect prompt injection.
- Ingestion points: The skill triggers on and processes user-supplied requests containing phrases like "org chart creator" or "org creator" (SKILL.md).
- Boundary markers: The instructions do not define delimiters or specific "ignore" commands to isolate untrusted data from the agent's core instructions.
- Capability inventory: The skill allows the use of broad tools including
Bash(cmd:*),Write, andEdit(SKILL.md). - Sanitization: There are no instructions for validating, escaping, or sanitizing the content of the user requests before they are used to generate code or execute commands.
- [NO_CODE]: The skill consists only of an instruction file (SKILL.md) and does not include any accompanying scripts, executables, or data files for analysis.
Audit Metadata