sleep-analyzer

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from multiple external files which could contain malicious instructions if the data sources are compromised.
  • Ingestion points: The skill reads from various JSON files and logs in the data-example/ directory, including sleep-tracker.json, fitness-tracker.json, hypertension-tracker.json, diabetes-tracker.json, and mood-tracker.json.
  • Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the processing logic provided to the agent.
  • Capability inventory: The skill utilizes Read, Write, Grep, and Glob tools for file system interaction.
  • Sanitization: There is no evidence of validation or sanitization routines for the data content before it is processed by the analysis algorithms or included in output reports.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 10:11 PM
Security Audit — agent-trust-hub — sleep-analyzer