partner-programs
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill incorporates a local Python script,
scripts/check-output.py, which is intended for execution by the agent to validate the quality of its output. Analysis of the script confirms it only performs basic string matching and keyword verification against a local file path, with no capabilities for network access or system modification. - [INDIRECT_PROMPT_INJECTION]: The skill includes a validation process where a script reads the agent's generated deliverable. 1. Ingestion points:
scripts/check-output.pyreads a file containing agent-produced text based on user input. 2. Boundary markers: None present. 3. Capability inventory: The script usesPath.read_text()but contains no dangerous execution sinks such asevalorsubprocess. 4. Sanitization: The script only performs case-insensitive keyword searches to verify term presence.
Audit Metadata