world-bank
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill establishes a 'Capability Contract' that explicitly restricts the agent from inventing credentials, certifying compliance, or making contractual commitments without authority.
- [SAFE]: No remote code execution or external dependency downloads were detected. All operations are confined to the provided local files and the user's authorized workspace.
- [SAFE]: The skill includes comprehensive 'Decision Rules' and 'Stop conditions' that instruct the agent to identify and record gaps in evidence rather than fabricating information.
- [SAFE]: Analysis of the instructions and reference files revealed no evidence of obfuscation, hidden logic, or attempts to bypass system safety guidelines.
- [SAFE]: The skill processes untrusted solicitation documents and ToRs, which is a standard surface for indirect prompt injection; however, the skill includes sufficient boundary instructions and verification requirements to mitigate this risk.
Audit Metadata