simulate
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a local Python script
revenue-simulator.pyto process parameters and generate simulations. - [PROMPT_INJECTION]: The skill processes untrusted user input to define marketing scenarios, creating a surface for indirect prompt injection. Ingestion points: User-provided marketing scenarios and channel-level parameters defining the simulation model. Boundary markers: No explicit delimiters or instructions are specified to isolate or ignore embedded instructions within user inputs. Capability inventory: Execution of a local Python script and read access to brand configuration and profile files in the
~/.claude-marketing/directory. Sanitization: No explicit validation, escaping, or filtering of user-provided content is mentioned before the data is processed.
Audit Metadata