paid-ads
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external marketing data which may be influenced by third-party sources.
- Ingestion points:
scripts/roas_calculator.pyprocesses data via the--fileargument, andscripts/ad_health_scorer.pyprocesses data via the--checksand--multiarguments, which read JSON files from the workspace. - Boundary markers: The instructions do not provide specific delimiters or 'ignore embedded instructions' directives for the agent when interpreting the output generated from these data files.
- Capability inventory: The skill's capabilities are limited to the two provided Python scripts, which perform mathematical calculations and print analysis to standard output; they do not have network access or file-writing permissions.
- Sanitization: The scripts use standard JSON parsing which prevents technical injection, but there is no natural language sanitization to prevent adversarial content within the metrics files from influencing the agent's subsequent recommendations.
Audit Metadata