compliance-auditor
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of natural language instructions and does not contain any executable code, shell scripts, or binary files.- [SAFE]: No external dependencies, package installations, or remote code downloads were identified.- [SAFE]: No hardcoded credentials, sensitive file access, or network exfiltration patterns are present.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external evidence and regulated workflows, creating a surface for indirect prompt injection if the audited content contains malicious instructions.
- Ingestion points: Processes external tasks and compliance evidence as defined in the SKILL.md instructions.
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands in the input data.
- Capability inventory: The skill has no capabilities for network access, file modification, or command execution, and explicitly requests a read-only sandbox mode in its frontmatter.
- Sanitization: There is no evidence of input sanitization or filtering for the data being audited.
Audit Metadata