occupational-health-analyzer
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data from multiple health tracking files and uses this information to generate reports and assessments.
- Ingestion points: Data is read from
data-example/occupational-health-tracker.json,data-example/sleep-tracker.json,data-example/fitness-tracker.json, anddata-example/mental-health-tracker.json. - Boundary markers: There are no explicit instructions for the agent to use XML-like tags, delimiters, or specific 'ignore instructions inside data' warnings when processing these files.
- Capability inventory: The skill utilizes
Read,Grep,Glob,Write, andEdittools. While it cannot execute arbitrary shell commands, it can modify files based on its analysis. - Sanitization: The instructions do not specify any validation or sanitization steps for the health data content before it is interpolated into the agent's context for risk scoring and report generation.
Audit Metadata