privacy-migration-analyzer
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a reference implementation for processing business signals. It uses standard Python libraries for local file operations and contains no network activity, credential exposure, or obfuscation.
- [INDIRECT_PROMPT_INJECTION]: The skill includes a mechanism to ingest and process external business signals. While the logic is currently benign, it represents an entry point for untrusted data. 1. Ingestion points:
run.py(reads data from file specified by--input). 2. Boundary markers: None present in the code or instructions. 3. Capability inventory: File system write access viarun.py. 4. Sanitization: No input validation or sanitization is performed on the ingested payload.
Audit Metadata