risk-assessment
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional and does not utilize any tools, scripts, or network capabilities. It provides a standardized matrix and register format for conducting risk assessments manually within the agent's context.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-supplied risk descriptions to generate a prioritized register. While this constitutes a data ingestion surface, the skill lacks any executable capabilities (such as subprocess calls, file writes, or network requests) that could be exploited via embedded instructions.
- [SAFE]: The LICENSE file contains a trailing block of non-standard text mentioning 'Packeted-User-Relations' and 'recorded-cams'. This content is not executable, is not treated as instructions by the agent, and does not impact the security posture of the skill.
Audit Metadata