vn-offer-check
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides job offer review functionality using local scripts and established reference materials.
- [COMMAND_EXECUTION]: The skill executes a bundled Node.js script (
scripts/gross-net.mjs) to perform tax calculations. The script is local to the skill package, does not have external dependencies, and does not perform network operations. - [INDIRECT_PROMPT_INJECTION]: The skill processes job offer data provided by users or extracted from documents. While this represents an untrusted input surface, the data is passed to a calculation script that strictly parses numeric values, minimizing the risk of instruction injection affecting the execution logic.
Audit Metadata