metronome-plg-billing
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could potentially contain malicious instructions targeting the agent's logic.
- Ingestion points: SKILL.md (Phase 1) describes ingesting pricing page URLs, prose descriptions, and spreadsheet data provided by the user.
- Boundary markers: Absent; the instructions do not specify the use of delimiters to isolate user-provided content from the agent's internal instructions.
- Capability inventory: SKILL.md and references/worked-examples.md detail significant API write capabilities, including creating billable metrics, products, rate cards, and contracts via POST requests to the Metronome API.
- Sanitization: Absent; the skill lacks instructions for sanitizing or validating external inputs before they are used to influence the creation of billing objects.
- [EXTERNAL_DOWNLOADS]: The skill fetches configuration and pattern references from the official Metronome documentation domain (docs.metronome.com) during execution.
Audit Metadata