bom-cost-review
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of markdown instructions and does not contain any executable scripts, shell commands, or binary files.
- [SAFE]: No security issues were detected. The skill defines a logical framework for data analysis within the agent's context without requesting or using any system-level capabilities.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (BOM files provided by the user). However, it lacks any high-risk capabilities such as network access, file system writes, or code execution tools that could be exploited if malicious instructions were embedded in the input data. Boundary markers are suggested via structured output requirements.
Audit Metadata