intl-expansion
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were identified in the skill instructions or associated scripts.
- [COMMAND_EXECUTION]: The skill references three local Python scripts (
localization_checklist.py,market_readiness_scorer.py,regulatory_mapper.py). Analysis of these scripts confirms they perform purely local data processing and calculations based on command-line arguments. They do not use dangerous functions such aseval(),exec(), orsubprocess, and do not interact with the file system or network. - [DATA_EXFILTRATION]: There is no evidence of data exfiltration. The skill does not access sensitive user directories or environment variables, and it lacks network-enabled tools or instructions.
- [PROMPT_INJECTION]: The skill content consists of strategic frameworks and decision-making logic. It does not contain any adversarial instructions aimed at bypassing AI safety filters or extracting system prompts.
- [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for processing user-supplied data through its scoring and mapping tools.
- Ingestion points: User-provided arguments for market names and metrics in
scripts/market_readiness_scorer.py,scripts/localization_checklist.py, andscripts/regulatory_mapper.py. - Boundary markers: None present in script execution flow.
- Capability inventory: No subprocess calls, exec/eval, file-write, or network operations found across any scripts.
- Sanitization: Inputs are parsed via
argparsewith type constraints for numeric values, preventing typical injection into arithmetic logic.
Audit Metadata