growth-advisor

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill manages the installation and updates of the adapty CLI package through standard Node.js package management tools. It references the official vendor repository for the latest version and beta releases to ensure functionality.
  • [DYNAMIC_EXECUTION]: Shell commands are executed via a Python helper script using subprocess.run. The script uses structured argument lists and safe string splitting to interact with the Adapty CLI, fetching the data necessary for application audits.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data from app analytics and market medians. To prevent errors or hallucinations based on this data, it includes a check-reply function that performs deterministic checks on the agent's draft responses, ensuring claims are backed by the retrieved numbers.
  • [DATA_EXFILTRATION]: A feedback note system allows the agent to send operational metadata to the vendor. The instructions include strict data sanitization rules that prevent the leakage of PII, specific financial values, or proprietary user information, restricting communication to generic feedback regarding the skill's performance.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 01:36 PM