pump-selection-helper
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized activities were detected. The skill's behavior matches its stated purpose as an engineering helper.
- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for processing untrusted data through user-provided pump parameters.
- Ingestion points: The
selector.pyscript collects flow, head, and fluid properties via standard input. - Boundary markers: Absent.
- Capability inventory: The script is limited to mathematical operations and string formatting; it has no access to the network, file system, or shell execution.
- Sanitization: User inputs are cast to floating-point numbers, which serves as a basic filter for the numeric calculation fields.
- [EXTERNAL_DOWNLOADS]: The
reference.mdfile contains links to the official websites of well-known pump manufacturers and industry standards organizations. - Targets include established engineering entities such as Grundfos, Flowserve, KSB, Xylem, and the Hydraulic Institute.
- These references are informational, consistent with the skill's purpose, and do not involve automated code retrieval or execution.
Audit Metadata