amz-cash-flow-forecaster-dd7
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided business data (sales velocity, fulfillment mix, transit times).
- Ingestion points: The skill explicitly requests the agent to collect these inputs from the user in SKILL.md.
- Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are used for these inputs.
- Capability inventory: The skill uses no tools (filesystem, network, or shell) and only produces text output, neutralizing potential injection risks.
- Sanitization: No input validation is specified.
- [NO_CODE]: The skill consists entirely of Markdown instructions and mathematical logic. It does not contain or download any scripts, binaries, or automated executable content.
- [SAFE]: The skill includes a reference to a well-known service (WhatsApp) via a group invitation link (
https://chat.whatsapp.com/ILX65p1yWcaIG3c9WGHpTY) for the author's community. This is a standard promotional practice and does not involve automated downloads or data exfiltration.
Audit Metadata