revenue-operations
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data files including sales pipelines and financial metrics. While this is the intended primary purpose, it creates a surface where untrusted data is ingested into the agent's context. * Ingestion points:
scripts/pipeline_analyzer.py,scripts/forecast_accuracy_tracker.py, andscripts/gtm_efficiency_calculator.pyingest user-supplied JSON data. * Boundary markers: The skill uses defined JSON schemas for input data, providing structural validation. * Capability inventory: The tools are limited to local data processing and report generation with no network access or administrative privileges. * Sanitization: Input is constrained by the expected JSON structure defined in the documentation. - [SAFE]: The skill follows standard development practices for data analysis tools and does not contain hardcoded credentials, obfuscated code, or attempts to persist access or escalate privileges.
Audit Metadata