startup-user-simulator
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a provided Python script (
scripts/generate_report.py) to transform analysis results into an HTML report. This script uses only standard library modules (argparse,html,json,pathlib) and does not perform network operations. - [DATA_EXPOSURE]: The skill analyzes external URLs and user-provided artifacts to perform simulations. All results are stored locally in the workspace. No patterns of credential harvesting or data exfiltration were detected.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes untrusted data from external websites and landing pages, the risk is mitigated by the structured evaluation framework. Furthermore, the report generation script correctly uses
html.escapefor all data interpolated into the HTML report, preventing potential Cross-Site Scripting (XSS) attacks from malicious page content. - [SAFE]: No obfuscation, persistence mechanisms, or privilege escalation attempts were found. The skill's behavior matches its stated purpose.
Audit Metadata