business-event-formats
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a structured methodology for event planning. It defines clear boundaries and delegates unrelated tasks to specialized sibling skills, following the principle of least privilege in its design.
- [PROMPT_INJECTION]: The skill instructions contain numerous restrictive keywords such as 'Never', 'Stop', and 'Do NOT use'. These are legitimate operational constraints intended to keep the agent within its functional domain and do not represent attempts to bypass system safety filters.
- [CREDENTIALS_UNSAFE]: No hardcoded credentials, API keys, or sensitive environmental paths were found in the skill or its reference files.
- [EXTERNAL_DOWNLOADS]: The skill references sibling skills in the format 'samber/dev-event-organizer-skills@...'. These are vendor-owned resources from the same author and do not involve unauthorized third-party downloads.
- [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface via the 'Interview' section where it processes user-provided business details. However, it implements a multi-step validation workflow (Workflow step 8) that requires explicit approval before finalizing outputs, which serves as a mitigation for potential injection in user data.
- [OBFUSCATION]: No obfuscated text, base64 encoding, zero-width characters, or homoglyph attacks were detected in any of the provided files.
Audit Metadata