gtm-status
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill confirms implementation progress by checking for the existence of GTM configuration and credential files (gtm-credentials.json and gtm-token.json) produced by related vendor tools. It does not attempt to read or display the content of these sensitive credential files, reporting only their presence to confirm the environment is configured.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from multiple JSON and Markdown files to generate a status dashboard, which presents a surface for indirect prompt injection.
- Ingestion points: gtm-tracking-plan.json, gtm-implementation-log.json, gtm-test-results.json, gtm-config.json, audit-report.json, and docs/gtm-event-schema.md.
- Boundary markers: None identified in the prompt logic.
- Capability inventory: The skill has read-only access to local files and provides console output; it lacks network access or file-write capabilities.
- Sanitization: The skill includes logic to note if files are malformed but does not explicitly sanitize the text extracted from the files before displaying it in the console.
Audit Metadata