shop-traffic-report
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data retrieved from external analytics tools which constitutes an attack surface.
- Ingestion points: Analytics data retrieved via
shop_list_page_views,shop_list_launches, and othershop_list_*tools as described in SKILL.md. - Boundary markers: None specified for the interpolation of tool output.
- Capability inventory: The skill is restricted to
READ_ONLYaccess and has no subprocess, file-write, or network capabilities. - Sanitization: Not explicitly mentioned, however, the data processed is primarily aggregate metrics (counts, percentages, averages) which pose minimal risk.
- [SAFE]: The skill adheres to the principle of least privilege by declaring a
READ_ONLYaccess contract and restricting its operations to data aggregation and formatting. No obfuscation, persistence mechanisms, or privilege escalation patterns were detected.
Audit Metadata