wc-matchday-timing
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements structural logic for fantasy football tactical planning. It uses Shannon entropy for spread calculations and lexicographic sorting for bench management, which are benign mathematical operations.
- [SAFE]: Data ingestion is limited to web-searching for public football match calendars and reading internal signals (e.g., player-ev, scout). No sensitive user data access or credential usage was detected.
- [SAFE]: The skill uses an internal signal emitter (
wc-signal-emitter) to provide its analysis to other components. It does not perform any direct command execution, file modifications, or unauthorized network transmissions. - [PROMPT_INJECTION]: While the skill ingests external data from web searches (match-day calendars), this is an inherent requirement for its primary function. The risk of indirect prompt injection is minimized as the data is used for quantitative analysis and the skill does not possess high-privilege capabilities such as shell execution or file system writes.
- Ingestion points: Web-search for match-day calendar data in Step 1 of the workflow.
- Boundary markers: None explicitly defined.
- Capability inventory: Data emission via
wc-signal-emitter. - Sanitization: None specified.
Audit Metadata