suede-churn-prevention
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of instructional content and reference documentation for subscriber retention. No malicious code, obfuscation, or exfiltration patterns were identified.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from local project files such as
.agents/product-marketing.md. While these ingestion points represent a theoretical surface for indirect prompt injection, the risk is mitigated by the skill's explicit 'Boundaries' section and 'HALT' mechanism, which mandate human-in-the-loop authorization for any billing-related mutations or subscription changes. - [COMMAND_EXECUTION]: The skill contains mockups and templates using syntax like
[Update Payment Method →], but these are for UI/email design and do not represent executable shell commands or dynamic context injection vectors.
Audit Metadata