security-forecast-analyzer
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could contain malicious instructions.
- Ingestion points: The
run.pyscript reads content from a file path provided via the--inputcommand-line argument usingPath.read_text(). - Boundary markers: There are no delimiters or safety instructions implemented to prevent the AI agent from following instructions embedded within the input data.
- Capability inventory: The skill possesses local file system read and write capabilities as demonstrated in
run.py. - Sanitization: No sanitization, filtering, or validation of the input content is performed before the data is processed or stored.
Audit Metadata