ga4-measurement-plan
Pass
Audited by Gen Agent Trust Hub on May 28, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to Indirect Prompt Injection because it ingests untrusted data from external sources and processes it using high-capability tools.
- Ingestion points: In Step 1, the skill uses the
WebFetchtool to crawl a user-provided URL and a spread of site pages. - Boundary markers: Absent. There are no instructions or delimiters defined to prevent the agent from following malicious instructions embedded in the HTML of the fetched web pages.
- Capability inventory: The skill allows access to
Bash,Write,Read, andWebFetchtools, which could be abused if an attacker-controlled website successfully injects instructions. - Sanitization: Absent. The instructions do not include steps to sanitize, validate, or escape the external content before the agent analyzes it.
Audit Metadata