loyalty-program-design
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of markdown-based design guidelines and reference documentation. Extensive review of all reference files confirmed the absence of executable code, shell commands, or network-related operations.
- [PROMPT_INJECTION]: The skill includes explicit instructions for the AI agent to treat all external data (such as web pages, tickets, and survey answers) strictly as data and never as instructions, providing a robust defense against indirect prompt injection.
- [DATA_EXFILTRATION]: The skill author includes mandatory data privacy guidelines, explicitly prohibiting the storage of credentials, customer records, or sensitive benchmarks within project-level context files.
- [EXTERNAL_DOWNLOADS]: The documentation mentions the author's own skill management utility for optional installation of related modules, which is a standard and expected vendor resource.
Audit Metadata