commercial-lease-analyzer
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The workflow and rules defined in the skill are consistent with its stated purpose and do not exhibit any malicious intent.
- [PROMPT_INJECTION]: The skill ingests untrusted data from external lease documents (PDF and .docx), creating a surface for indirect prompt injection.
- Ingestion points: The skill reads user-provided lease documents and letters of intent (SKILL.md).
- Boundary markers: The instructions do not define delimiters or specific isolation markers for the document content.
- Capability inventory: The skill utilizes powerful tools including
Bash,Read, andWrite(SKILL.md). - Sanitization: There are no instructions for sanitizing or escaping the content extracted from processed documents.
Audit Metadata