create-chart

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill retrieves data from the Amplitude platform (such as existing chart names, cohort definitions, and event metadata) to inform its actions, creating a surface for instructions embedded in that data to influence the agent's behavior.
  • Ingestion points: Data retrieved from Amplitude:search, Amplitude:get_charts, Amplitude:get_cohorts, and Amplitude:get_event_properties enters the agent context.
  • Boundary markers: The instructions do not specify the use of delimiters or specific system instructions to ignore potential commands embedded within the retrieved Amplitude entity metadata.
  • Capability inventory: The skill has the ability to execute queries (Amplitude:query_dataset) and modify resources (Amplitude:save_chart_edits) on the Amplitude platform.
  • Sanitization: There is no evidence of sanitization or strict schema validation performed on the strings retrieved from the platform before they are used to build new chart definitions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 03:20 PM