create-dashboard
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow that ingests data from external sources (Amplitude event and chart metadata) to perform dashboard creation tasks.
- Ingestion points: Data enters the skill context through the
Amplitude:searchandAmplitude:get_chartstools mentioned in SKILL.md. - Boundary markers: The instructions do not specify the use of delimiters or boundary markers when interpolating retrieved chart metadata into new dashboard configurations.
- Capability inventory: The skill utilizes
Amplitude:save_chart_editsandAmplitude:create_dashboardto modify the user's environment based on ingested data. - Sanitization: There are no explicit instructions for sanitizing or validating names and descriptions retrieved from search results before they are used in dashboard creation. This pattern is consistent with the intended purpose of a dashboard construction tool.
Audit Metadata