automated-decision-rights
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection through data ingestion in the contestation processing script.\n- Ingestion points: The
scripts/process.pyscript accepts untrusted user input via the--groundsand--nameparameters.\n- Boundary markers: The script does not implement specific delimiters or instructions to ignore embedded commands within the user-provided input strings in its output.\n- Capability inventory: The skill provides local data processing and JSON generation; it does not contain network, file-system write, or other high-privilege operations in its scripts.\n- Sanitization: Input is serialized using standardjson.dumps(), which ensures structural integrity but does not filter the semantic content of the strings for instruction injection.\n- [COMMAND_EXECUTION]: The skill utilizes a local Python script (scripts/process.py) to automate decision assessment and contestation processing workflows.
Audit Metadata