org-health-diagnostic
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for organizational health assessment and benchmarking.
- [REMOTE_CODE_EXECUTION]: No remote code execution vulnerabilities were identified. The included Python script
health_scorer.pyrelies exclusively on the Python standard library. - [DATA_EXFILTRATION]: No network access or data exfiltration mechanisms were found. The skill processes data locally.
- [COMMAND_EXECUTION]: The script provides a command-line interface for manual metric entry, but it does not perform any unsafe system calls or shell command execution.
- [INDIRECT_PROMPT_INJECTION]: The skill has a low attack surface for indirect prompt injection. Ingestion points: Data enters via CLI input in
health_scorer.py. Boundary markers: The script acts as a boundary; inputs are not directly re-interpolated into instructions. Capability inventory: No dangerous tools or commands (network, file-write, subprocess) are present. Sanitization: Inputs are cast to floats, sanitizing them against text-based injections.
Audit Metadata