mutation-safety

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [NO_CODE]: The skill consists exclusively of markdown documentation, configuration data, and diagrams. It contains no executable scripts, binaries, or automated installation hooks that could execute arbitrary commands.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a protocol for interacting with external data sources such as the Google Ads API and Google Sheets. It mitigates potential risks associated with these data ingestion points by mandating a two-step approval process (dry-run followed by human confirmation) and requiring exact-match identifier validation for all write operations.
  • [SAFE]: The skill operates as a purely instructional safety layer that restricts the agent's autonomy for sensitive operations, significantly enhancing the security posture of the environment without introducing new attack vectors.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 09:35 AM