procurement-policy-and-manual
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines a professional and legitimate process for policy creation. It correctly scopes its activity to drafting and document structure without attempting to access sensitive system resources or perform unauthorized network operations.
- [NO_CODE]: The provided files consist solely of Markdown-based instructions and structural blueprints. There are no scripts, binaries, or automated installation procedures associated with this skill.
- [INDIRECT_PROMPT_INJECTION]: The skill manages an input surface for organizational data.
- Ingestion points: Data is collected via the 'Required Inputs' section in SKILL.md, including entity type and funding details.
- Boundary markers: Not present; the agent is instructed to use the inputs directly in the drafting process.
- Capability inventory: The skill's functionality is limited to content drafting and document production; it does not utilize shell commands, network requests, or dangerous API calls.
- Sanitization: Input validation or escaping is not specified, as the skill operates within a text-generation context.
Audit Metadata