lease-compliance
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is auditing lease data, which it performs using local file operations. No suspicious code or dangerous patterns are present.
- [PROMPT_INJECTION]: The skill is a surface for indirect prompt injection because it ingests lease databases and project codebases. However, the risk is negligible as it lacks network access and command execution capabilities. 1. Ingestion points: User arguments and audited data sources. 2. Boundary markers: Absent. 3. Capability inventory: Writing to
docs/and~/.claude/projects/. 4. Sanitization: Not specified. - [DATA_EXFILTRATION]: No network activity was detected. Analysis is performed and stored locally.
- [COMMAND_EXECUTION]: No shell commands or subprocesses are invoked by the skill instructions.
Audit Metadata