hospitality-procurement
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data structures for spend analysis and supplier performance scoring.
- Ingestion points: The skill uses
spend_data(DataFrame) andperformance_data(Dictionary) as inputs for theHospitalitySpendAnalyzerandSupplierPerformanceManagerclasses defined inSKILL.md. - Boundary markers: None present in the provided Python snippets.
- Capability inventory: The code is limited to data aggregation, arithmetic calculations, and performance scoring using
pandasandnumpy. There are no capabilities for file system writing, network communication, or shell command execution within the scripts. - Sanitization: No explicit sanitization of input strings is present; however, the operations performed are strictly numerical and categorical aggregations which pose no risk of command or instruction injection in this context.
- [REMOTE_CODE_EXECUTION]: The skill refers to several common Python libraries and commercial procurement platforms for informational purposes. There are no instructions to download or execute unverified third-party scripts or packages.
Audit Metadata