csrd
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is composed exclusively of Markdown documentation and instructional text. No executable scripts, binaries, or configuration files that trigger code execution were identified.
- [SAFE]: No patterns of data exfiltration or sensitive information exposure were found. The skill mentions well-known sustainability platforms (e.g., CDP, EcoVadis, SAP, Workiva) in a purely descriptive context related to industry compliance practices.
- [SAFE]: No obfuscation, prompt injection, or persistence mechanisms were detected. The instructions maintain a consistent professional persona and cite legitimate EU directives and standards.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an inherent attack surface by processing user queries about sustainability reporting.
- Ingestion points: User-supplied questions regarding CSRD, ESRS, and sustainability topics (SKILL.md).
- Boundary markers: Not explicitly defined for user input.
- Capability inventory: The skill is limited to text-based advisory responses; it does not request or utilize tools for network operations, file system modifications, or command execution.
- Sanitization: Not present, though the impact is negligible due to the lack of executable capabilities.
Audit Metadata