data-budget-analyzer
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified. The scripts use standard libraries for file I/O and command-line argument parsing.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an ingestion surface for untrusted data via input files. Ingestion points: run.py (line 30) reads JSON data from the file path provided to the --input argument. Boundary markers: No explicit delimiters or instructions are provided to the agent to treat input as untrusted. Capability inventory: The skill has file system read and write capabilities as demonstrated in run.py. Sanitization: The reference implementation does not perform sanitization or validation of the input data content before processing.
Audit Metadata