family-health-analyzer
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill accesses sensitive personal data and medical history records.
- Evidence: It is configured to read from
data/family-health-tracker.json,data/hypertension-tracker.json,data/diabetes-tracker.json, anddata/profile.json. - [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface due to the ingestion of untrusted data files without adequate security controls.
- Ingestion points: The skill reads multiple JSON files from the
data/directory at runtime. - Boundary markers: No explicit delimiters or instructions are provided to the agent to prevent it from executing commands that might be embedded in the health data.
- Capability inventory: The skill uses
Read,Write,Grep, andGlobtools, which provide extensive file system access. - Sanitization: There is no evidence of sanitization, filtering, or validation of the content within the ingested JSON files.
Audit Metadata