data-analysis
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data to generate visual reports and HTML files, creating a surface for potential injection.
- Ingestion points: The skill is triggered when a user provides data for analysis (SKILL.md).
- Boundary markers: The instructions do not specify delimiters or warnings for the agent to ignore instructions embedded within the user data.
- Capability inventory: The agent has the capability to generate files in HTML and other formats (SKILL.md).
- Sanitization: There are no instructions provided to sanitize or escape the content of the user data before it is included in the generated reports.
Audit Metadata