pipeline-review
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a template-driven prompt for analyzing sales pipeline data provided via CSV or manual text input. It does not contain executable code, scripts, or external dependencies.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data (CSV exports or manual deal descriptions) provided by the user.
- Ingestion points: Data is received via file upload (CSV) or user-pasted text as described in the 'What I Need From You' section of SKILL.md.
- Boundary markers: None explicitly defined in the instructions to separate data from instructions.
- Capability inventory: The skill possesses no capabilities for command execution, network operations, or persistent file modification.
- Sanitization: No specific sanitization or validation logic is defined for the input data.
- Note: Because the skill lacks the ability to execute code or make network requests, the risk of indirect prompt injection is minimal and does not escalate the safety verdict.
Audit Metadata