worldcup-predictor
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses a bundled deterministic calculation engine (prediction-core v0.2.0) to perform all sports analysis, ensuring that results are based on mathematical models rather than AI hallucinations.
- [SAFE]: Extensive input validation is performed in
scripts/audit-input.mjs, which verifies data versions, content hashes, and structural integrity of the provided JSON snapshots before processing. - [PROMPT_INJECTION]: The
SKILL.mdfile contains instructions that explicitly prevent the agent from recreating probability formulas or inventing missing data. It also instructs the agent to ignore unreviewed adjustments, which serves as a safety constraint to maintain model integrity. - [EXTERNAL_DOWNLOADS]: The
assets/official-sources.jsonand reference documentation list URLs for FIFA and government weather APIs. These are documented for audit purposes and data provenance; the skill scripts do not perform runtime network requests to these or any other external domains. - [COMMAND_EXECUTION]: The skill includes CLI scripts for match prediction and tournament simulation that use standard Node.js file system APIs to read local data. No arbitrary command execution or shell injection vectors were identified.
Audit Metadata