report-generator
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates entirely on user-provided inputs or local memory files containing previously calculated metrics. It does not perform network operations or access sensitive system directories.
- [SAFE]: The skill consists only of markdown instructions and templates. No scripts (Python, Node.js) or executables are included, eliminating the risk of remote code execution or privilege escalation.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external campaign data and influencer handles. While technically an attack surface for indirect injection, the risk is negligible as the skill uses structured templates and focuses on data reporting rather than automated action execution. (Severity: SAFE)
- [DATA_EXPOSURE]: The skill writes report files to specific memory paths (
memory/influencer/report-generator/). These are standard project-level directories for managing agent memory and do not involve sensitive system files or credentials.
Audit Metadata