supply-chain-manager
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of Markdown documentation and reference files. There are no associated scripts (.py, .js, .sh), configuration files that trigger execution, or executable binaries included in the package.
- [SAFE]: No evidence of prompt injection, data exfiltration, or obfuscation was found. The instructions are focused on supply chain management business processes and explicitly define boundaries for sensitive operations, such as referring legal matters to commercial counsel and security reviews to information security engineers.
- [DYNAMIC_CONTEXT_INJECTION]: The skill does not utilize any dynamic shell execution patterns (e.g., exclamation-backtick commands) in its metadata or instructions.
- [INDIRECT_PROMPT_INJECTION]: While the skill is designed to help the agent process supply chain data (forecasts, supplier lists), it does not define any automated tool invocations or file-write capabilities that would create a high-risk attack surface. The guidance remains at the conversational and strategic level.
Audit Metadata