saas-metrics-coach
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill instructions are focused entirely on business metric analysis and do not contain any patterns intended to bypass safety filters or override agent instructions.
- [DATA_EXFILTRATION]: No network-enabled tools or commands (such as curl, wget, or requests) are used. The skill processes user-provided revenue and customer numbers purely for local calculation.
- [REMOTE_CODE_EXECUTION]: There are no remote dependencies or external downloads. All calculations are performed by scripts included in the skill package using the local Python interpreter.
- [COMMAND_EXECUTION]: The skill invokes local scripts (
scripts/metrics_calculator.py,scripts/quick_ratio_calculator.py,scripts/unit_economics_simulator.py). These scripts are benign and use standard input parsing (argparse) to process numerical data. - [CREDENTIALS_UNSAFE]: No hardcoded API keys, tokens, or sensitive credentials were found in any of the files.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests untrusted user data (revenue and customer counts), this data is processed through strictly typed numerical inputs in the provided scripts, preventing instructions in the data from influencing the agent's logic.
Audit Metadata