analyze-experiment-consolidated
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill interacts with 'Amplitude', a well-known analytics service. It uses specialized tools (
Amplitude:get_from_url,Amplitude:use_amp_experiments,Amplitude:query_amplitude_data, etc.) to fetch data from Amplitude's official infrastructure. These operations are considered SAFE per [TRUST-SCOPE-RULE] as they target a recognized vendor service. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, specifically user feedback and insights via
Amplitude:use_amplitude_ai_feedback. This creates a vulnerability surface where malicious instructions embedded in user feedback could attempt to influence the agent's analysis or recommendations. Severity is LOW as per standard classification for this attack surface. - [SAFE]: The skill provides robust guidelines for data validation, including checks for Sample Ratio Mismatch (SRM), statistical power, and variance. It correctly instructs the agent to treat API placeholders and documentation as non-malicious.
Audit Metadata