case-study-builder
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a template-based content generation tool that operates on local data provided by the user to build customer success stories.
- [COMMAND_EXECUTION]: The skill includes a Python script
scripts/check-output.py. Analysis shows this script is a benign format validator that reads a specified file and checks for the presence of required Markdown headers. It does not perform network operations, access sensitive file paths, or use dangerous execution functions likeeval()oros.system(). - [INDIRECT_PROMPT_INJECTION]: While the skill involves processing customer-provided information (challenges, quotes, results), it does not provide an exploitable surface for indirect prompt injection as it lacks network access or file-writing capabilities that could be abused via malicious data ingestion.
Audit Metadata