intl-expansion

Pass

Audited by Gen Agent Trust Hub on Apr 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security vulnerabilities were identified in the skill instructions or associated scripts.
  • [COMMAND_EXECUTION]: The skill references three local Python scripts (localization_checklist.py, market_readiness_scorer.py, regulatory_mapper.py). Analysis of these scripts confirms they perform purely local data processing and calculations based on command-line arguments. They do not use dangerous functions such as eval(), exec(), or subprocess, and do not interact with the file system or network.
  • [DATA_EXFILTRATION]: There is no evidence of data exfiltration. The skill does not access sensitive user directories or environment variables, and it lacks network-enabled tools or instructions.
  • [PROMPT_INJECTION]: The skill content consists of strategic frameworks and decision-making logic. It does not contain any adversarial instructions aimed at bypassing AI safety filters or extracting system prompts.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for processing user-supplied data through its scoring and mapping tools.
  • Ingestion points: User-provided arguments for market names and metrics in scripts/market_readiness_scorer.py, scripts/localization_checklist.py, and scripts/regulatory_mapper.py.
  • Boundary markers: None present in script execution flow.
  • Capability inventory: No subprocess calls, exec/eval, file-write, or network operations found across any scripts.
  • Sanitization: Inputs are parsed via argparse with type constraints for numeric values, preventing typical injection into arithmetic logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 1, 2026, 01:08 AM