river-outfall-status-visualizer
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No override instructions, safety bypasses, or malicious role-play patterns were detected in the skill instructions.
- [DATA_EXFILTRATION]: The skill operates entirely on local data. No network operations or external data transmission patterns were found in the Python scripts.
- [REMOTE_CODE_EXECUTION]: No remote script downloads or dynamic execution patterns (like eval or exec) are present. The skill uses a custom, dependency-free library to parse Excel files locally.
- [COMMAND_EXECUTION]: Shell commands are used appropriately for generating templates and processing local files within the project environment.
- [CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or sensitive credentials were found in the source code or assets.
- [OBFUSCATION]: The code is written in plain text with no use of Base64 encoding, zero-width characters, or other hidden content techniques.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests external data (Excel workbooks), it processes this data for numeric calculations and template rendering. The inclusion of HTML escaping and JSON sanitization in the report generator mitigates common injection risks in the output deliverables.
Audit Metadata