create-chart
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves data from the Amplitude platform (such as existing chart names, cohort definitions, and event metadata) to inform its actions, creating a surface for instructions embedded in that data to influence the agent's behavior.
- Ingestion points: Data retrieved from
Amplitude:search,Amplitude:get_charts,Amplitude:get_cohorts, andAmplitude:get_event_propertiesenters the agent context. - Boundary markers: The instructions do not specify the use of delimiters or specific system instructions to ignore potential commands embedded within the retrieved Amplitude entity metadata.
- Capability inventory: The skill has the ability to execute queries (
Amplitude:query_dataset) and modify resources (Amplitude:save_chart_edits) on the Amplitude platform. - Sanitization: There is no evidence of sanitization or strict schema validation performed on the strings retrieved from the platform before they are used to build new chart definitions.
Audit Metadata