synthesis-absence-coordination
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The file
test_validate_config.pyusessubprocess.runto execute the localvalidate_config.pyscript. This is used strictly for automated testing of the configuration validator's CLI interface. The command usessys.executableand explicit script paths, which is a secure and standard practice for integration testing. - [DATA_EXPOSURE]: The skill reads user-defined configuration from
~/.synthesis/absence-coordination/config.yamland writes audit logs to a ledger file. These operations are local to the user's environment and are essential for the skill's functionality of coordinating personal and work absences. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from a YAML configuration file to generate message drafts. While this represents a potential surface for indirect injection if the config file is compromised, the skill mitigates this risk by including a comprehensive validator script (
validate_config.py) and enforcing adraft_onlypolicy for high-stakes notifications, ensuring human review before any messages are sent.
Audit Metadata