analytics-tracking
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines protocols for handling untrusted external data, which presents a surface for potential indirect instructions. * Ingestion points: External web content and data via the BrowserOS interface (SKILL.md). * Boundary markers: Absent. * Capability inventory: Terminal execution through the rtk ExecutionProxy, local file reads of architecture graphs, and file writing via the MemoryStore (SKILL.md). * Sanitization: Protocols mandate redaction of secrets and PII before sharing context.
- [COMMAND_EXECUTION]: The skill utilizes a terminal execution proxy (rtk prefix) for standard operational tasks such as running tests, following the framework's iron law of execution.
Audit Metadata