customer-churn-signals
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides detailed instructions for a specialized RevOps workflow. It does not contain any executable scripts, network requests, or attempts to access sensitive system credentials or files.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface by instructing the agent to process untrusted data from external sources, specifically customer emails and support tickets.
- Ingestion points: Data is ingested from CRM activity (emails) and support ticket systems as specified in the Workflow section of
SKILL.md. - Boundary markers: The instructions do not define specific delimiters or "ignore" markers for the untrusted text data.
- Capability inventory: The skill's capabilities are restricted to statistical analysis (lift, lead time, coverage calculations) and the generation of text-based reports or queries. No dangerous system-level capabilities such as file-system writes, network operations, or shell execution are requested or used.
- Sanitization: No explicit sanitization or validation of the content of emails or tickets is performed before processing.
Audit Metadata