hazard-risk-map
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill is composed entirely of natural language instructions and markdown. It does not contain any code snippets, scripts, or external dependencies.
- [SAFE]: Analysis of the skill instructions revealed no evidence of prompt injection, obfuscation, persistence mechanisms, or unauthorized privilege escalation.
- [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface by ingesting user-provided data such as geographic location and household vulnerabilities.
- Ingestion points: User input fields defined in the 'Required Inputs' section of SKILL.md.
- Boundary markers: None present; the instructions do not specify delimiters for user input.
- Capability inventory: No capabilities identified. The skill does not use any tools for file writing, network requests, or system command execution.
- Sanitization: No sanitization or validation of user input is specified.
Audit Metadata