crm-reporting
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill consists entirely of instructional markdown files and contains no executable code, scripts, or automated network operations.
- [NO_CODE]: No source code, executables, or scripts are included with this skill, significantly reducing its potential for malicious behavior.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies an attack surface where untrusted data (exports, tickets, survey answers, web pages) enters the agent context. It includes strong negative instructions to ignore embedded commands. Capability inventory confirms no dangerous tools or subprocess calls are defined in the skill.
- [EXTERNAL_DOWNLOADS]: The documentation mentions an external CLI tool managed by the author for installing other skills. This is a standard vendor-provided utility intended for manual use by the user.
Audit Metadata