advertising-attribution-and-measurement

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [NO_CODE]: The skill is comprised entirely of instructional Markdown files. There are no Python scripts, Node.js packages, or shell commands included in the package.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data sources such as CRM records and advertising platform exports, creating a surface for indirect prompt injection.
  • Ingestion points: Platform and analytics exports, CRM fields, and Point-of-Sale (POS) data (referenced in SKILL.md).
  • Boundary markers: The instructions do not define specific delimiters to isolate external data from the agent's instructions.
  • Capability inventory: The skill is restricted to read-only analysis and lacks the capability to write files, execute system commands, or perform network operations.
  • Sanitization: No specific sanitization or validation rules are provided for the external data ingested during the measurement workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 12:10 PM