survey-analysis

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: No instructions were found that attempt to bypass safety filters, override system prompts, or extract internal instructions.
  • [DATA_EXFILTRATION]: The skill does not contain any network-facing commands (like curl or wget) or instructions to transmit data to external domains. Access to ../../CLAUDE.md is for localized configuration within the agent's environment.
  • [REMOTE_CODE_EXECUTION]: There are no patterns involving the download or execution of remote scripts or unverified third-party binaries.
  • [COMMAND_EXECUTION]: The skill is entirely descriptive and does not invoke subprocesses, shell commands, or system-level APIs.
  • [CREDENTIALS_UNSAFE]: No hardcoded API keys, secrets, or sensitive credentials were detected in the instructions or metadata.
  • [INDIRECT_PROMPT_INJECTION]: While the skill processes untrusted survey data, it lacks executable capabilities (like file writing or network access) that could be exploited via data-based injection.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 02:25 AM
Security Audit — agent-trust-hub — survey-analysis