intent-correlation-analysis
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local validation script (
scripts/validate-analysis.mjs) using Node.js to verify the integrity and schema of input/output packets. This is a standard and safe operational pattern for this skill's intended purpose of data auditing. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data (evidence packets). It mitigates injection risks through explicit instructions to treat packets as evidence rather than instructions and by using a validator script that strictly enforces schema, field lengths, and allowed predicates.
- [DATA_EXFILTRATION]: The provided validation script specifically includes logic to detect and reject absolute system paths (e.g.,
/Users/,/etc/,C:\), which effectively prevents the tool from being used to harvest or report on sensitive system-level file structures.
Audit Metadata