webinar-and-event-programs
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation instructs the agent or user to execute a provided Node.js script,
resources/event-program.js, to perform calculations. The script is included in the skill package and its behavior is limited to data processing and rendering results to the console. - [DATA_EXPOSURE]: Analysis of the source code and documentation shows no hardcoded credentials, sensitive file path access, or network exfiltration patterns. The script operates entirely on local data provided as input.
- [REMOTE_CODE_EXECUTION]: There are no patterns of downloading and executing remote scripts or installing unverified packages. The script uses only standard Node.js built-in modules.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data (event performance metrics). While this represents a surface for indirect prompt injection, the risk is negligible because the skill lacks the capabilities (like network access or file system writes) that an attacker would typically target, and the script includes input validation for numeric fields.
Audit Metadata