investigate-ai-session
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process conversation transcripts that contain untrusted user input, creating a surface for indirect prompt injection.
- Ingestion points: Conversation transcripts are retrieved via
Amplitude:get_amplitude_agent_analytics_infousing theview: "conversation"parameter as described inSKILL.md(Step 2). - Boundary markers: The instructions do not define specific delimiters or instructions for the agent to ignore potentially malicious content within the retrieved conversation data.
- Capability inventory: The skill uses the
Amplitude:get_amplitude_agent_analytics_infotool to retrieve session data, traces, and transcripts. It does not exhibit capabilities for writing to the filesystem, executing shell commands, or making arbitrary network requests. - Sanitization: No explicit sanitization or filtering of the retrieved conversation content is mentioned before it is processed by the agent.
Audit Metadata