cropland-out-of-production-agreements
Warn
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
cropland_calculator.pyperforms dynamic path modification by injecting a computed relative path intosys.path. It usessys.path.insert(0, str(Path(__file__).parent.parent.parent.parent / "Shared_Utils"))to resolve thefinancial_utilsdependency. This pattern is flagged because it allows loading code from arbitrary locations based on the filesystem structure. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a data ingestion surface through
cropland_calculator.py, which parses external JSON files provided via command-line arguments. - Ingestion points: The
main()function reads data from a path specified inargs.input_fileusingjson.load(). - Boundary markers: None are present; the script assumes the input file follows a specific schema without validating the source or integrity of the data.
- Capability inventory: The script is limited to mathematical calculations and JSON/stdout output; it does not perform network operations or file writes.
- Sanitization: There is no sanitization or bounds checking on the numerical or string inputs provided in the JSON data, which could lead to unexpected results if the output is interpreted by an LLM.
Audit Metadata