sleep-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from multiple external files which could contain malicious instructions if the data sources are compromised.
- Ingestion points: The skill reads from various JSON files and logs in the
data-example/directory, includingsleep-tracker.json,fitness-tracker.json,hypertension-tracker.json,diabetes-tracker.json, andmood-tracker.json. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the processing logic provided to the agent.
- Capability inventory: The skill utilizes
Read,Write,Grep, andGlobtools for file system interaction. - Sanitization: There is no evidence of validation or sanitization routines for the data content before it is processed by the analysis algorithms or included in output reports.
Audit Metadata