The Agent Skills Directory

[SAFE]: No malicious patterns or security vulnerabilities were detected. The skill's behavior is consistent with its stated purpose of conducting marketing attribution analysis.
[DATA_EXPOSURE_AND_EXFILTRATION]: The skill accesses brand profiles and marketing data from authorized local paths (~/.claude-marketing/) and connected MCPs. This behavior is expected for its functionality and does not involve unauthorized network exfiltration or credential harvesting.
[INDIRECT_PROMPT_INJECTION]: The skill processes data from external marketing platforms, creating a potential surface for indirect prompt injection.
Ingestion points: Multi-touch journey and conversion path data pulled from Google Analytics, Google Ads, Meta, and CRM MCPs.
Boundary markers: None identified in the instructions for delimiting external data.
Capability inventory: Reads brand profiles and guidelines from ~/.claude-marketing/ and writes attribution results and trend data to the local file system.
Sanitization: No explicit sanitization or validation of the ingested marketing data is described.
Risk Assessment: The risk is considered low because the data processed (primarily timestamps, channel IDs, and revenue values) is used for deterministic mathematical modeling rather than instructional execution.

attribution-report