acls-protocol-assistant
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security concerns were identified during the analysis of the instructions or the accompanying scripts.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill does not perform any network operations, use any communication tools, or access sensitive local files. All data processing is local to the agent's execution environment.
- [REMOTE_CODE_EXECUTION]: The provided Python scripts (
script.pyandskill.py) implement medical logic using standard built-in libraries. There is no usage ofeval(),exec(), or subprocess calls that could facilitate arbitrary code execution. - [PROMPT_INJECTION]: The instructions in
SKILL.mdandinstructions.mdare purely informational and do not contain any patterns intended to bypass safety guardrails or override system instructions. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits a safe ingestion surface.
- Ingestion points: Data enters via the
run_acls_protocolfunction inscript.pyandskill.pythrough arguments likerhythm_strandsymptoms. - Boundary markers: Not explicitly required as the skill lacks dangerous capabilities.
- Capability inventory: No network access, file system writes, or command execution capabilities are present across any script.
- Sanitization: The
rhythm_strinput is strictly validated against a predefinedCardiacRhythmEnum, preventing the processing of arbitrary instruction strings through that vector.
Audit Metadata