attendance
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an ingestion surface by taking user descriptions of workflows and shift timings to populate internal context. While this data is used to generate artifacts, the risk of instruction injection is mitigated by the skill's reliance on a fixed 'Field Reference' table and its strict constraint to produce only empty templates or synthetic examples.\n
- Ingestion points: User responses regarding shift timings, recording methods, and business rules in Step 2 (SKILL.md).\n
- Boundary markers: Absent in generated templates, though instructions require separating prose from data (SKILL.md).\n
- Capability inventory: Generates SQL DDL, JSON Schema, and CSV files; no direct command execution or network operations are enabled.\n
- Sanitization: Not explicitly defined, but the skill is prohibited from processing real sensitive data, and artifacts are limited to structural templates.\n- [SAFE]: No malicious patterns, remote code execution, or data exfiltration attempts were detected. The skill uses standard markdown and YAML structures for its intended purpose of process documentation and schema generation.
Audit Metadata