event-planner

Pass

Audited by Gen Agent Trust Hub on Oct 25, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources, including event organizer websites and user-uploaded documents.
  • Ingestion points: Step 2 of the workflow fetches organizer event pages and reads uploaded files.
  • Boundary markers: The skill contains instructions that text from external sources is data and should not be followed as instructions.
  • Capability inventory: The skill executes internal Python scripts and performs web fetches.
  • Sanitization: The instructions include a check to report requests for sensitive personal or financial information as potential scams.
  • [COMMAND_EXECUTION]: The skill utilizes internal Python scripts, scripts/plan_math.py and scripts/text_check.py, for mathematical calculations and text validation. These scripts use Python standard library modules.
  • [EXTERNAL_DOWNLOADS]: The skill fetches planning information from organizer and company websites. These operations are used for data retrieval and do not download or execute external code.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 25, 2026, 01:56 AM