ziwei

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local Node.js script (scripts/calculate.js) to perform its primary function. The execution is handled via a structured JSON pipe, which is a standard method for local tool interaction.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided birth parameters (date, time, longitude). It includes robust validation logic to reject malformed data, script tags, or non-numeric coordinates, mitigating risks from untrusted user input.
  • [DATA_EXPOSURE]: The skill only accesses user-provided parameters for the purpose of the calculation. There is no evidence of access to sensitive system files, environment variables, or hardcoded credentials.
  • [REMOTE_CODE_EXECUTION]: All logic is contained within the skill's own directory. There are no external downloads or remote script executions observed.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 09:13 AM