synthesis-absence-coordination

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The file test_validate_config.py uses subprocess.run to execute the local validate_config.py script. This is used strictly for automated testing of the configuration validator's CLI interface. The command uses sys.executable and explicit script paths, which is a secure and standard practice for integration testing.
  • [DATA_EXPOSURE]: The skill reads user-defined configuration from ~/.synthesis/absence-coordination/config.yaml and writes audit logs to a ledger file. These operations are local to the user's environment and are essential for the skill's functionality of coordinating personal and work absences.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from a YAML configuration file to generate message drafts. While this represents a potential surface for indirect injection if the config file is compromised, the skill mitigates this risk by including a comprehensive validator script (validate_config.py) and enforcing a draft_only policy for high-stakes notifications, ensuring human review before any messages are sent.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 05:31 PM
Security Audit — agent-trust-hub — synthesis-absence-coordination