medicare-drug-stats
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill connects to official U.S. government data portals (data.cms.gov) and uses the Socrata Open Data API (SODA) to retrieve public healthcare datasets. These are well-known, authoritative sources for Medicare expenditure and utilization information.
- [DATA_EXFILTRATION]: There is no evidence of unauthorized data transmission or access to sensitive local files or environment variables. All data accessed is publicly available and de-identified aggregate information.
- [PROMPT_INJECTION]: The instructions provide legitimate query templates for the AI agent and do not contain patterns intended to bypass safety filters or override system instructions.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external API endpoints (data.cms.gov). While this represents an attack surface for indirect prompt injection, the sources are trusted federal government repositories, and the skill is limited to administrative and clinical data analysis.
Audit Metadata