product-analytics
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected. The skill's functionality aligns with its described purpose of assisting with product metrics.
- [COMMAND_EXECUTION]: The skill defines CLI usage for a local script
scripts/metrics_calculator.py. These commands are used to process local CSV files for metrics and do not involve system-level privileges or network operations. - [PROMPT_INJECTION]: The skill processes user-supplied CSV files (
events.csv,funnel.csv), which constitutes an ingestion point for untrusted data. However, the risk is negligible as the capabilities are limited to local mathematical calculations. - Ingestion points:
events.csvandfunnel.csvprocessed by the metrics script. - Boundary markers: Absent.
- Capability inventory: Executes local Python scripts for data processing.
- Sanitization: Not explicitly specified in the instructions.
Audit Metadata