event-driven-tracker
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions include installing external libraries
openbbandpandasvia pip, as well as tools likeclawhubandgithub-opsvia npx. These are used for financial data retrieval and event management. - [COMMAND_EXECUTION]: The skill requires running a local Python script (
scripts/track_events.py) and various CLI tools to process event data. The included script performs data processing and reporting without performing sensitive operations. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface where it ingests and processes external data from JSON files.
- Ingestion points: The
scripts/track_events.pyfile (line 39) reads input from a provided file path. - Boundary markers: None detected in the instructions or scripts.
- Capability inventory: The script's capabilities are limited to data sorting and console output; it does not perform network, file-system, or process-related operations.
- Sanitization: No explicit sanitization or validation of the JSON content is performed beyond standard JSON parsing.
Audit Metadata