pricing-renewal-discipline
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from
brand-config.jsonand CRM systems to generate renewal plans and customer communications. This creates an attack surface where malicious data within these external sources could influence the agent's behavior.\n - Ingestion points:
brand-config.jsonand CRM customer data (mentioned in the "Workflow" section).\n - Boundary markers: None present in the instructions to separate data from commands.\n
- Capability inventory: The skill uses
ReadandWritetools to process data and generate plans.\n - Sanitization: No explicit sanitization or validation of the input data is described.
Audit Metadata