event-registration-forecast
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run a local Python script (
scripts/forecast-registrations.py) to perform registration forecasting. This script uses the Python standard library and does not involve shell interpolation, network calls, or dangerous system operations. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from user-provided CSV files (actuals, references, and ticket types). Analysis shows that this data is only processed by a specialized local Python script for numerical calculations and is not used to construct system prompts or as input to dangerous functions like
evalorsubprocess. The capability risk is minimal. - [REMOTE_CODE_EXECUTION]: No remote code execution patterns were detected. The skill does not download external scripts or use package managers at runtime.
- [DATA_EXFILTRATION]: No network operations or data exfiltration attempts were found. The skill does not access sensitive system files or credentials.
Audit Metadata