churn-prevention
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of markdown documentation, templates, and strategic frameworks for reducing subscription churn. It contains no executable scripts or dangerous shell commands.
- [EXTERNAL_DOWNLOADS]: The documentation references various well-known third-party services such as Stripe, PostHog, Churnkey, and Customer.io as recommendations for implementation. These references are neutral and informative, pointing to established industry tools for SaaS billing and analytics.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to read context from project files such as .agents/product-marketing.md or .claude/product-marketing.md. Ingestion points: Defined in SKILL.md under the 'Before Starting' section, targeting project-specific marketing context files. Boundary markers: Absent. Capability inventory: No executable scripts, subprocess calls, or network operations are present in the provided skill files. Sanitization: Absent. While the skill ingests external data that could contain instructions, the lack of exploitable capabilities renders the attack surface non-viable.
Audit Metadata