vendor-review
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- Data Ingestion Surface: The skill evaluates external vendor proposals, pricing, and contract terms provided by the user. While processing external data is a common design pattern for document analysis, it is a point where the agent interacts with potentially untrusted content. However, the skill lacks access to sensitive capabilities (such as network access or file system modification) that could be exploited through this surface.
- Ingestion points: User-provided vendor names, context, and proposal documents referenced in the 'What I Need From You' section.
- Boundary markers: No explicit delimiters or specialized safety warnings are included for the external data processing.
- Capability inventory: No executable commands, network operations, or file-writing tools are invoked within the skill instructions.
- Sanitization: External content is interpreted directly to populate the analysis templates.
- Instruction-Based Design: The skill consists entirely of markdown instructions and reporting templates. It does not include scripts, binary executables, or package dependencies, which minimizes the risk of unauthorized command execution or persistence.
Audit Metadata