paid-measurement-loop
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill contains a vulnerability surface as it processes external data such as scraped text, reviews, and emails. However, it implements strong defensive measures by explicitly instructing the agent to treat such data as untrusted input and to ignore any instructions embedded within the evidence.
- Ingestion points: Identified in
SKILL.md(Data Sources) andreferences/skill-contract.md(Core invariants), covering scraped content and third-party exports. - Boundary markers: The skill explicitly instructs the agent to treat these sources as untrusted input and to ignore embedded instructions.
- Capability inventory: The skill primarily performs analysis and recommendations; no dangerous subprocess calls or direct file-write capabilities were detected in the scripts.
- Sanitization: Relies on the agent's adherence to the safety instructions provided in the skill contract.
Audit Metadata