raffle-winner-picker
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and process data from external, potentially untrusted sources, which creates a surface for indirect prompt injection.
- Ingestion points: The skill instructions prompt the agent to read data from user-provided Google Sheet URLs and local file paths such as CSV and Excel files (specified in SKILL.md).
- Boundary markers: The instructions do not define delimiters or provide explicit warnings to the agent to ignore instructions that might be embedded within the spreadsheet or list content.
- Capability inventory: The agent uses platform tools to read local files and access web-based spreadsheet services to extract winner information.
- Sanitization: There are no instructions or scripts provided to sanitize, escape, or validate the content of the external data before it is processed by the agent.
- [NO_CODE]: The skill consists entirely of markdown instructions and usage examples. It does not include any scripts, binaries, or automated configuration files.
Audit Metadata