sensortower

Pass

Audited by Gen Agent Trust Hub on Jul 21, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill processes data from the SensorTower API, which constitutes an external data source.\n
  • Ingestion points: Data ingestion occurs via the dataBridgePull function within SKILL.md.\n
  • Boundary markers: The skill does not use specific markers to delineate API response data from agent instructions.\n
  • Capability inventory: The skill is limited to data retrieval and does not possess capabilities for file writing or command execution.\n
  • Sanitization: No explicit data sanitization or validation logic is present for the API responses.\n- [DATA_EXFILTRATION]: The skill fetches data from a well-known service (SensorTower) using an authorized data bridge mechanism. It does not access sensitive local credentials or files.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 21, 2026, 04:53 PM
Security Audit — agent-trust-hub — sensortower