occupational-health-analyzer
Pass
Audited by Gen Agent Trust Hub on Apr 19, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection through its data ingestion points.
- Ingestion points: The skill reads data from files like
data-example/occupational-health-tracker.json,data-example/sleep-tracker.json,data-example/fitness-tracker.json, anddata-example/mental-health-tracker.json. - Boundary markers: No explicit delimiters or "ignore embedded instructions" warnings are specified when reading external data.
- Capability inventory: The skill has access to
Read,Grep,Glob,Write, andEdittools, which could be misused to modify files if malicious instructions are processed from the data. - Sanitization: No sanitization, escaping, or validation steps for the content of the ingested JSON files are described.
Audit Metadata