credit-risk-scoring
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill was analyzed across all 11 threat categories, including prompt injection, data exfiltration, and remote code execution. No malicious patterns or security vulnerabilities were identified.
- [COMMAND_EXECUTION]: The provided Python script (
scripts/credit_risk.py) performs standard mathematical operations and formatted printing. It uses theargparseandjsonstandard libraries to process a user-supplied configuration file and does not invoke any shell commands or external processes. - [DATA_EXPOSURE]: The skill operates entirely on data provided by the user via a local JSON configuration file. It does not attempt to access sensitive system files (e.g., SSH keys, AWS credentials) or environment variables.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes external data (
credit.json), the processing script lacks dangerous capabilities. It does not perform network requests, file writes, or dynamic code execution (eval/exec), which prevents the exploitation of any malicious content embedded in the input data.
Audit Metadata