zach-feature-demand-validator
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses explicit execution recipes via python scripts (
scripts/parse_reviews.py,scripts/parse_review_source_pack.py,scripts/generate_keyword_csv.py,scripts/generate_community_csv.py, andscripts/validate_deliverables.py) to process structured json data blocks, normalize them to compliant tables, and validate deliverable schemas. - [INDIRECT_PROMPT_INJECTION]: The skill defines risk boundaries and mitigation techniques for processing untrusted datasets. A strict regex compiler verification rule (
^[A-Z0-9]{10}$) checks that incoming datasets provide a legitimate 10-digit ASIN string and intercepts blocklisted tokens likeMULTI,UNKNOWN, orB0XXXXXto secure the automation pipe.
Audit Metadata