decision-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes user-provided decision problems, which creates a surface for instructions to be embedded in input data. \n- Ingestion points: User data is ingested via
$ARGUMENTSor conversation context as defined inSKILL.md. \n- Boundary markers: The skill does not implement delimiters or 'ignore' instructions for the processed data. \n- Capability inventory: The agent is instructed to perform a file-write operation to prepare the visualization inSKILL.md. No network or shell capabilities are leveraged. \n- Sanitization: There is no mention of sanitizing or escaping the user-provided data. \n- [DYNAMIC_EXECUTION]: The skill uses an HTML/JavaScript template to present results. \n- Evidence:SKILL.mdrequires filling markers inassets/template.htmland opening the resulting file, which initiates script execution in a browser context.
Audit Metadata