attack-tree-construction
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a structural framework for threat modeling. All provided Python code focuses on data modeling using standard libraries (dataclasses, enum, typing) and logic for path analysis.
- [INDIRECT_PROMPT_INJECTION]: The skill acts on user-supplied data regarding attack scenarios. While it lacks explicit boundary markers for this untrusted input, the analysis functionality is limited to in-memory path calculation and serialization to JSON/diagram formats. It possesses no capabilities for file system modification, network communication, or code execution that could be subverted by malicious input data.
Audit Metadata