fda-medtech-compliance-auditor
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of natural language instructions and markdown documentation. No automated scripts, subprocess executions, or system modifications are performed.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external documentation provided by the user, creating a surface for potential indirect prompt injection. However, the risk is negligible as the skill lacks any capabilities (such as file writing, network access, or shell execution) that could be exploited by malicious content within those documents. \n
- Ingestion points: User-provided compliance documents (referenced in the 'How It Works' section of SKILL.md). \n
- Boundary markers: None present. \n
- Capability inventory: No tools or active capabilities are utilized. \n
- Sanitization: None present.
Audit Metadata