moving-company-estimate-decoder
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data in the form of moving company estimates and contract text. This creates a surface for indirect prompt injection where malicious instructions could be embedded within the provided documents to influence the agent's behavior.
- Ingestion points: The skill explicitly requests 'The estimate/contract text' as a required input in
SKILL.md. - Boundary markers: No explicit delimiters or boundary markers are defined in the instructions to isolate the untrusted input from the system instructions.
- Capability inventory: The skill produces text-based analysis and does not have access to tools, file system writes, or network operations.
- Sanitization: There are no instructions for sanitizing or escaping the content of the estimate before processing.
- [NO_CODE]: The skill consists entirely of markdown documentation and instructional content. It does not contain any executable scripts, binaries, or configuration files capable of performing system-level operations or making network requests.
Audit Metadata