Plan PA Days
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python utility script at
${CLAUDE_PLUGIN_ROOT}/skills/budget-optimization/scripts/budget_calculator.pyto estimate childcare costs for the planned dates. - [EXTERNAL_DOWNLOADS]: Fetches school year calendar data and downloads PDF documents from official school board websites and user-provided URLs.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it reads and processes content from untrusted external sources (school calendars and websites) that could contain malicious instructions.
- Ingestion points: Reads text from school board websites, user-provided URLs, and downloaded calendar PDFs at runtime.
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore' commands to isolate external calendar data from the agent's execution context.
- Capability inventory: The skill has the capability to write multiple files to the local research directory and execute a local Python script for calculations.
- Sanitization: No methods for sanitizing or validating the text content extracted from the external calendars are described.
Audit Metadata