release-packet
Pass
Audited by Gen Agent Trust Hub on Jul 22, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements a secure administrative process for preparing financial release packets and exhibits no malicious patterns.
- Command Execution: The skill invokes a local Python script to process payment data within a restricted environment.
- Data Access: It performs localized data processing and explicitly enforces a maker-checker protocol, stating it cannot perform financial transactions autonomously. It does not interact with sensitive system files or credentials.
- Dynamic Loading: The script uses a relative path to import functions from a neighboring skill, which is a standard pattern for co-located skill dependencies within the environment.
- [PROMPT_INJECTION]: The skill processes external data, which is a surface for indirect prompt injection.
- Ingestion points: The script
prepare_release_packet.pyreads data from files provided via the--queueand--sanctionsarguments. - Boundary markers: The output is structured as JSON, which delineates data fields, though no explicit instructional bypass warnings are present.
- Capability inventory: The script is restricted to local file reading and printing to stdout; it has no network access or system command execution capabilities.
- Sanitization: Input is parsed using the standard
jsonlibrary, and the skill includes logic to halt processing for payments that do not pass screening.
Audit Metadata