claim-denial-decoder
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill does not contain any executable scripts, shell commands, or tool invocations. Its functionality is entirely based on natural language processing of user-provided information to generate structured documents.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external data in the form of insurance denial letters and policy documents.
- Ingestion points: The skill explicitly requests the user to provide "denial letter text" and "policy language" in the 'Required Inputs' section of SKILL.md.
- Boundary markers: No explicit boundary markers or delimiters (e.g., XML tags) are specified to isolate the untrusted input from the skill's instructions.
- Capability inventory: The skill has no active tools, network access, or file-system capabilities, limiting the potential impact of any injected instructions.
- Sanitization: There is no mention of sanitizing or escaping the input text before the agent processes it.
- Note: While the ingestion of untrusted data represents a theoretical injection surface, the absence of dangerous capabilities makes this a low-risk informational observation rather than a high-severity finding.
Audit Metadata