sectors

Pass

Audited by Gen Agent Trust Hub on Sep 18, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides structured domain knowledge for proposal writing and contains no active scripts, shell commands, or binary executables. The entire capability is instructional in nature.- [EXTERNAL_DOWNLOADS]: The documentation references external finance and accounting doctrine hosted on the author's official GitHub account (github.com/peterbamuhigire/chwezi-accounting-doctrine). These resources are informative and consistent with the author's stated identity.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external documents such as solicitations, Terms of Reference (ToR), and project briefs. While this creates a surface for potential data-driven instruction overrides, the skill includes robust safeguards to mitigate this risk. 1. Ingestion points: External buyer solicitations, ToRs, and profiles are read by the agent as specified in the 'Required Inputs' tables. 2. Boundary markers: The instructions include explicit stop conditions, conformance checks, and 'Anti-Pattern' warnings to ensure the agent remains compliant with the framework logic. 3. Capability inventory: The skill is limited to reading workspace files and preparing routing guidance; it lacks the ability to execute code or perform network operations. 4. Sanitization: The skill mandates evidence recording and source verification, requiring the agent to mark unverified data as 'not assessed' rather than accepting it as fact.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 18, 2026, 03:40 AM