api-forecast-analyzer
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes structured input data (JSON/CSV) which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: run.py reads data from a local file path provided via the --input argument using input_path.read_text().
- Boundary markers: The skill lacks explicit boundary markers or instructions to the agent to ignore potentially embedded instructions in the ingested data.
- Capability inventory: The script has local file system read and write capabilities via the pathlib module in run.py.
- Sanitization: There is no evidence of sanitization, filtering, or validation of the input data before it is processed.
Audit Metadata