trace-assumption-cascade
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists entirely of natural language instructions and YAML configuration for reasoning tasks. No executable scripts, binaries, or shell commands are included.
- [INDIRECT_PROMPT_INJECTION]: The skill defines an ingestion surface for untrusted data via the input contract (assumption, dependency_graph, downstream_claims). While it lacks boundary markers and sanitization, the skill possesses no dangerous capabilities such as file system writes, shell execution, or network operations, neutralizing the potential for malicious exploitation.
- [SAFE]: No security issues were detected. The skill performs purely logical analysis on user-provided data without using external tools or performing side-effecting operations.
Audit Metadata