power-budget-calculator
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a local Python script
scripts/calculate_power.pythat is executed via theuvtool to perform power budget calculations. The script handles local file operations, such as reading JSON configurations and writing markdown reports, which is consistent with its stated utility. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for processing untrusted data via project configuration files.
- Ingestion points: The script
scripts/calculate_power.pyreads data fromassets/example-project.jsonand external files provided by the user via the--jsonargument. - Boundary markers: None; the script parses JSON data directly using the standard library.
- Capability inventory: The Python script has capabilities to read from and write to the local filesystem for configuration loading and report generation.
- Sanitization: The script employs standard
json.load()parsing and basic type validation for numerical component data, which is appropriate for its intended use case as a calculation tool.
Audit Metadata