alert-fatigue-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external structured data (JSON/CSV), which creates a potential surface for indirect prompt injection where malicious instructions could be embedded in the data.
- Ingestion points: The
run.pyscript reads data from an external file specified by the--inputargument. - Boundary markers: No boundary markers or instructions to ignore embedded commands are present in the logic or prompt instructions.
- Capability inventory: The skill has the capability to write to the local filesystem via the
--outputargument inrun.py. - Sanitization: The script does not perform sanitization, schema validation, or filtering of the input payload before processing.
Audit Metadata