analyze-ai-topics
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from user conversation transcripts which could contain malicious instructions designed to influence the agent's analysis.
- Ingestion points: Raw conversation data is fetched in Step 4 using the
Amplitude:search_agent_analytics_conversationsandAmplitude:query_agent_analytics_sessionstools. - Boundary markers: The instructions do not specify the use of delimiters or specific warnings to ignore instructions found within the analyzed transcripts.
- Capability inventory: The skill's capabilities are limited to reading data from the Amplitude API and presenting summaries. It does not have access to the file system, shell, or arbitrary network locations, which significantly limits the impact of any potential injection.
- Sanitization: There are no instructions provided for sanitizing or escaping the content of the transcripts before processing.
Audit Metadata