claim-denial-decoder

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill does not contain any executable scripts, shell commands, or tool invocations. Its functionality is entirely based on natural language processing of user-provided information to generate structured documents.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted external data in the form of insurance denial letters and policy documents.
  • Ingestion points: The skill explicitly requests the user to provide "denial letter text" and "policy language" in the 'Required Inputs' section of SKILL.md.
  • Boundary markers: No explicit boundary markers or delimiters (e.g., XML tags) are specified to isolate the untrusted input from the skill's instructions.
  • Capability inventory: The skill has no active tools, network access, or file-system capabilities, limiting the potential impact of any injected instructions.
  • Sanitization: There is no mention of sanitizing or escaping the input text before the agent processes it.
  • Note: While the ingestion of untrusted data represents a theoretical injection surface, the absence of dangerous capabilities makes this a low-risk informational observation rather than a high-severity finding.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 12:04 PM
Security Audit — agent-trust-hub — claim-denial-decoder