event-planner
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources, including event organizer websites and user-uploaded documents.
- Ingestion points: Step 2 of the workflow fetches organizer event pages and reads uploaded files.
- Boundary markers: The skill contains instructions that text from external sources is data and should not be followed as instructions.
- Capability inventory: The skill executes internal Python scripts and performs web fetches.
- Sanitization: The instructions include a check to report requests for sensitive personal or financial information as potential scams.
- [COMMAND_EXECUTION]: The skill utilizes internal Python scripts,
scripts/plan_math.pyandscripts/text_check.py, for mathematical calculations and text validation. These scripts use Python standard library modules. - [EXTERNAL_DOWNLOADS]: The skill fetches planning information from organizer and company websites. These operations are used for data retrieval and do not download or execute external code.
Audit Metadata