marketing-demand-acquisition

Pass

Audited by Gen Agent Trust Hub on Apr 18, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: No evidence of prompt injection attempts, role-play bypasses, or instructions to ignore safety guidelines was found.
  • [DATA_EXFILTRATION]: No sensitive file paths, hardcoded credentials, or unauthorized network operations were detected. The skill focuses on standard marketing attribution and tracking (UTMs).
  • [REMOTE_CODE_EXECUTION]: No remote script execution patterns (e.g., curl|bash) or downloads from untrusted sources were identified.
  • [COMMAND_EXECUTION]: The skill references a local script 'scripts/calculate_cac.py' for basic arithmetic calculations related to customer acquisition costs, which is standard for the described functionality.
  • [OBFUSCATION]: No obfuscated content, encoded URLs, or hidden characters were found in the provided file.
  • [INDIRECT_PROMPT_INJECTION]: The skill does not ingest untrusted external data for prompt interpolation, minimizing the risk of indirect injection attacks.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 18, 2026, 12:07 PM
Security Audit — agent-trust-hub — marketing-demand-acquisition