event-team-structure
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill contains no executable scripts, shell commands, or external code dependencies. All files are markdown instructions or JSON configuration data.
- [INDIRECT_PROMPT_INJECTION]: The skill provides an interface for ingesting untrusted user descriptions regarding their event organization (e.g., in the 'Interview' and 'Workflow' sections of SKILL.md). While this creates a theoretical attack surface for indirect prompt injection, the skill lacks the necessary capabilities (such as file system access, network operations, or shell execution) to facilitate an exploit. The risk is considered negligible as the skill only generates organizational advice.
- Ingestion points: The
Interviewquestions andWorkflowdata gathering steps inSKILL.mdwhere the agent processes user-provided event details. - Boundary markers: None explicitly defined in the agent's instructions for handling the ingested data.
- Capability inventory: Zero. The skill has no access to subprocesses, networking, or file-writing tools.
- Sanitization: No explicit sanitization or filtering is applied to the user input before it is used to generate recommendations.
Audit Metadata