create-dashboard

Pass

Audited by Gen Agent Trust Hub on Aug 29, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow that ingests data from external sources (Amplitude event and chart metadata) to perform dashboard creation tasks.
  • Ingestion points: Data enters the skill context through the Amplitude:search and Amplitude:get_charts tools mentioned in SKILL.md.
  • Boundary markers: The instructions do not specify the use of delimiters or boundary markers when interpolating retrieved chart metadata into new dashboard configurations.
  • Capability inventory: The skill utilizes Amplitude:save_chart_edits and Amplitude:create_dashboard to modify the user's environment based on ingested data.
  • Sanitization: There are no explicit instructions for sanitizing or validating names and descriptions retrieved from search results before they are used in dashboard creation. This pattern is consistent with the intended purpose of a dashboard construction tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 29, 2026, 05:11 PM
Security Audit — agent-trust-hub — create-dashboard