ad-spend-allocator
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of natural language instructions and logical frameworks for data analysis. It does not invoke shell commands, external APIs, or executable scripts.
- [INDIRECT_PROMPT_INJECTION]: The skill contains a data ingestion surface for processing external marketing metrics, which represents a potential vector for indirect prompt injection.
- Ingestion points: Performance data provided by the user during Phase 0, including spend, conversion rates, and revenue metrics.
- Boundary markers: No specific delimiters or safety instructions are defined to separate user-provided data from the agent's instructions.
- Capability inventory: The skill is capable of writing a markdown report to the local filesystem at
clients/<client-name>/ads/spend-allocation-[YYYY-MM-DD].md. - Sanitization: There is no explicit sanitization or schema validation performed on the ingested data.
- Conclusion: While the surface exists, the risk is negligible as the skill lacks high-privilege capabilities or network access that could be abused through malicious data.
Audit Metadata