walmart-sales-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external CSV data to generate analysis summaries and HTML reports, which creates a potential surface where malicious instructions within the data could influence the agent's output or the generated report content.
- Ingestion points: The CSV data is ingested by all analysis scripts including generate_correlation_heatmap.py and generate_html_report.py.
- Boundary markers: There are no explicit delimiters or instructions provided to the agent to disregard instructions within the data.
- Capability inventory: The skill uses execute_skill_script_file to run Python code and html_interpreter to display the final report.
- Sanitization: No input validation or sanitization is performed on the CSV contents.
Audit Metadata