budget-optimization
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external advertising campaign data, which creates a potential surface for instructions hidden within data fields.
- Ingestion points: External data enters the context through campaign performance retrieval functions described in SKILL.md.
- Boundary markers: The skill logic lacks explicit delimiters or instructions to ignore potential natural language commands embedded in campaign names or metadata.
- Capability inventory: The analyzed code performs mathematical modeling and budget reallocation logic without exposing high-risk system commands or network operations.
- Sanitization: There is no evidence of data sanitization or validation to filter out non-numeric or malicious content from the ingested performance datasets.
Audit Metadata