pump-selection-helper

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized activities were detected. The skill's behavior matches its stated purpose as an engineering helper.
  • [INDIRECT_PROMPT_INJECTION]: The skill has a surface for processing untrusted data through user-provided pump parameters.
  • Ingestion points: The selector.py script collects flow, head, and fluid properties via standard input.
  • Boundary markers: Absent.
  • Capability inventory: The script is limited to mathematical operations and string formatting; it has no access to the network, file system, or shell execution.
  • Sanitization: User inputs are cast to floating-point numbers, which serves as a basic filter for the numeric calculation fields.
  • [EXTERNAL_DOWNLOADS]: The reference.md file contains links to the official websites of well-known pump manufacturers and industry standards organizations.
  • Targets include established engineering entities such as Grundfos, Flowserve, KSB, Xylem, and the Hydraulic Institute.
  • These references are informational, consistent with the skill's purpose, and do not involve automated code retrieval or execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 02:26 AM