enterprise-signal-listener
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of natural language instructions and formatting templates (Markdown and YAML). It does not include any scripts (Python, JavaScript, shell), binary executables, or dynamic code execution patterns.
- [SAFE]: The skill's behavior is restricted to extracting signals from user conversations to populate a structured intake form. It follows a passive "listening" pattern and does not perform any sensitive operations such as file system access, network requests, or credential handling.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes untrusted user input (natural conversation), the risk is mitigated by the highly structured output format (YAML) and specific instructions to only extract relevant business signals. The attack surface for traditional prompt injection is minimal given the lack of executable capabilities.
Audit Metadata