source-observe
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized network behaviors were detected. The skill follows best practices for data integrity by requiring manual verification of automated findings.
- [COMMAND_EXECUTION]: The skill invokes a local script
scripts/observations.pyto process image files and generate scaled crops. This operation is limited to local relative paths and is a documented part of the skill's primary function. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data sources which represents a theoretical injection surface. 1. Ingestion points: The skill reads project records from
source-observations.mdand processes external photographic and scan data. 2. Boundary markers: No explicit prompt delimiters are defined. 3. Capability inventory: The skill usesscripts/observations.pyto read source files and write annotated crops to the file system. 4. Sanitization: The skill implements manual review as a security control, requiring the user to 'confirm the full mark lies on the claimed construction' and forbidding the synthesis of 'accepted' statuses from author labels or automated loops.
Audit Metadata