mental-health-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data from external files, which creates a potential surface for indirect prompt injection.
- Ingestion points: Data is loaded from
data-example/mental-health-tracker.json,data-example/mental-health-logs/,data-example/sleep-tracker.json, and other health-related tracking files. - Boundary markers: The skill body lacks explicit delimiters or instructions to ignore potential commands embedded within the data files.
- Capability inventory: The skill has
Read,Grep,Glob,Write, andEditpermissions, allowing it to access and modify data on the file system. - Sanitization: There are no verification or sanitization steps mentioned to filter the content of the external JSON files before they are processed by the agent.
Audit Metadata