cpg-network-design
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security issues were detected in the skill instructions or provided code snippets.
- [INDIRECT_PROMPT_INJECTION]: The skill defines functions that ingest external data via pandas DataFrames. Ingestion points:
customers_df,potential_dcs_df, andplants_dfinSKILL.md. Boundary markers: Absent. Capability inventory: No dangerous capabilities such as subprocess calls, exec/eval, file system writes, or network operations were identified across the scripts. Sanitization: Absent. While the skill possesses an ingestion surface for untrusted data, the risk is negligible due to the lack of exploitable capabilities.
Audit Metadata