marketing-plan
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is designed to retrieve data from well-known marketing and business services such as Ahrefs, Stripe, Google Analytics (GA4), and Shopify. These interactions are standard for professional marketing analysis and target established, trusted organizations.
- [COMMAND_EXECUTION]: The documentation references the installation of the
agent-browserutility via npm to facilitate web-based research. This is a common utility for agentic automation and represents a legitimate execution pattern within this context. - [SAFE]: The skill employs a multi-phase state machine (INIT, REVIEW, FINALIZE) that requires explicit human approval for every plan section. This architectural choice effectively mitigates the risks associated with processing potentially untrusted external content by ensuring a user review checkpoint.
- [SAFE]: Credential management instructions in the methodology documents demonstrate a commitment to security best practices by recommending the use of
.envfiles and environment variables for API keys rather than hardcoding them.
Audit Metadata