demand-forecasting
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external operational sources, creating a potential surface for indirect prompt injection where malicious content within data fields could influence the agent's forecasting behavior.
- Ingestion points: Sales, inventory, and branch data from POS, ERP, or ecommerce extracts as defined in SKILL.md.
- Boundary markers: The workflow lacks explicit delimiters or instructions for the agent to disregard potential instructions embedded within the processed data.
- Capability inventory: The skill performs read-only data analysis and executes SQL queries against operational databases (SKILL.md, references/demand_forecasting.md).
- Sanitization: There are no explicit instructions for sanitizing or filtering non-numeric data fields before processing.
Audit Metadata