demand-forecasting
Warn
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: MEDIUMINDIRECT_PROMPT_INJECTIONPERSISTENCE
Full Analysis
- [PERSISTENCE]: Evaluation tasks in the skill (evals/database-schema-new-product-fallback-and/task.md) instruct the creation of a shell script and a cron-compatible command to perform nightly database refreshes, establishing a persistent execution mechanism on the system.
- [INDIRECT_PROMPT_INJECTION]: The skill implements a workflow for processing external sales and inventory data from database sources, creating an indirect prompt injection surface.
- Ingestion points: Historical sales records, order statuses, and inventory levels are queried from database tables (orders, order_lines).
- Boundary markers: The provided implementation templates do not use explicit delimiters or instructions to protect the agent's context from potentially malicious data in the sales database.
- Capability inventory: The skill utilizes database read access (db.raw) and file system writes for report generation.
- Sanitization: The TypeScript examples correctly demonstrate the use of parameterized queries to prevent SQL injection.
Audit Metadata