subscription-snapshot
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard data analysis tool authored by appeeky. It interacts with RevenueCat tools to pull business metrics such as MRR and active subscriptions. It properly uses placeholders for API keys (e.g., <sk_xxx>) and refers to a secure connection mechanism (Appeeky Connect) for credential management, which is a safe practice.
- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection through its ingestion of external data. 1. Ingestion points: Data entering from RevenueCat API tools and the local app-ads-context.md file. 2. Boundary markers: The instructions lack explicit delimiters or instructions to ignore embedded commands in the ingested data. 3. Capability inventory: The skill is designed to perform file-write operations to update the app-ads-context.md file with updated metrics. 4. Sanitization: No explicit content filtering or sanitization of the ingested data is described in the skill instructions.
Audit Metadata