kai-weekly-audit
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several Python scripts located within the agent's environment, such as 'scripts/audit/collect.py', 'scripts/ads/pull_all.py', and 'scripts/analytics/performance_dashboard'. These commands are used to automate marketing data collection, report generation, and quality checks.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external sources such as marketing configuration files and analytics exports.
- Ingestion points: 'MARKETING.md', 'audit-data.json', and connected data exports (GA4, GSC, Ads, CRM).
- Boundary markers: None explicitly defined to separate untrusted data from instructions.
- Capability inventory: The skill can execute local Python scripts and write audit artifacts to the workspace.
- Sanitization: No explicit sanitization or validation of the ingested marketing data is described.
Audit Metadata