analyze-experiments
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external data from the Amplitude platform, which presents a standard surface for indirect prompt injection attacks.
- Ingestion points: The skill retrieves experiment descriptions and keys via
Amplitude:get_experiments(Step 1) and qualitative user feedback viaAmplitude:get_feedback_insights(Step 7). - Boundary markers: The instructions do not define clear delimiters or "ignore embedded instructions" markers when interpolating data from experiment descriptions or user feedback into the analysis flow.
- Capability inventory: The skill has write capabilities through
Amplitude:create_experimentand various read tools includingAmplitude:query_experiment,Amplitude:search, andAmplitude:get_charts. - Sanitization: There is no mention of sanitizing or filtering external content (like feedback strings) before it is presented to the agent for synthesis.
Audit Metadata