The Agent Skills Directory

[SAFE]: The skill's primary function is to provide regulatory assistance and local auditing tools. All scripts (fda_submission_tracker.py, hipaa_risk_assessment.py, qsr_compliance_checker.py) were analyzed for security risks.
Data Ingestion Analysis: The compliance auditing scripts ingest local project files. This data ingestion is handled using standard file reading and regular expression matching. The content is used for reporting purposes and is not executed or interpreted as instructions, mitigating risks associated with indirect prompt injection.
Network & Exfiltration: No network-capable libraries or commands are present in the code. The scripts do not attempt to transmit data externally.
System Access: File access is restricted to the user-provided project directory and regulatory documentation within the skill's folder. There are no attempts to access sensitive system paths such as SSH keys or cloud credentials.
Execution Safety: No dangerous functions such as eval(), exec(), or os.system() are utilized. The scripts use safe, standard library modules for file path resolution and data processing.
[SAFE]: Documentation and reference materials contain legitimate regulatory frameworks and templates consistent with official FDA guidance and established industry standards, such as 21 CFR 820 and the HIPAA Security Rule.

fda-consultant-specialist