catalyst-map
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of Markdown instructions (SKILL.md) and a reference framework (references/catalyst-framework.md). There are no executable scripts, binaries, or configuration files that perform actions on the host system.
- [SAFE]: No malicious patterns were detected. The skill does not use any tools, perform network operations, or access sensitive file paths. It strictly provides a logical framework for the agent to follow when interacting with users about financial events.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes user-provided watchlists and portfolios (untrusted data), it lacks any exploitable capabilities such as file writing, network exfiltration, or shell execution. Consequently, the attack surface for indirect prompt injection is non-existent within the scope of this skill's definition.
Audit Metadata