customer-lifetime-value
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes customer order data to trigger automated behavior, which can be exploited if malicious content is present in the ingested data. * Ingestion points: Customer purchase history and profile data are ingested from a database via the db.orders.findMany and db.customers.findMany calls in SKILL.md. * Boundary markers: No specific delimiters or "ignore instructions" markers are implemented in the logic to isolate customer-controlled data fields. * Capability inventory: The skill allows database reads/writes and the ability to trigger external automated flows via service integrations like Klaviyo. * Sanitization: The provided logic does not demonstrate sanitization or validation of data fields that might be used in automated outreach.
Audit Metadata