business-rule-extractor
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external source code and production data to identify business rules. This creates an attack surface where malicious instructions hidden in the analyzed code (e.g., in comments or string literals) could potentially influence the agent's behavior.
- Ingestion points: Reads source code, production logs, and production data (referenced in SKILL.md).
- Boundary markers: No explicit delimiters or warnings to ignore instructions inside the analyzed data are provided.
- Capability inventory: The skill description does not specify tools for network access, file writing, or command execution.
- Sanitization: No sanitization or validation of the ingested code is described.
Audit Metadata