analytics-and-reporting
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, executable scripts, or network operations were detected. The skill is composed of instructional markdown and reference files designed to guide an AI's interpretation of user-provided data.
- [NO_CODE]: The skill does not contain any executable scripts (Python, JavaScript, or shell) or dependencies, significantly reducing the attack surface.
- [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it processes external inputs and local files, though it lacks capabilities to act on them. 1. Ingestion points: The skill instructs the agent to read local context files (brand-profile, social-strategy) and process user-provided analytics data from native platform dashboards. 2. Boundary markers: The instructions require the agent to cite native sources, flag missing data, and follow the structured METER framework. 3. Capability inventory: No executable scripts, subprocess calls, or network operations are present in the skill package. 4. Sanitization: No explicit input validation or sanitization logic is provided within the instructional text.
Audit Metadata