creating-experiments
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides structured instructions for managing A/B tests through official PostHog tool calls such as
experiment-createandexperiment-update. - [SAFE]: No patterns of prompt injection, data exfiltration, obfuscation, or unauthorized remote code execution were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill represents a standard input surface for indirect prompt injection where untrusted data is processed.
- Ingestion points: User-provided input for the experiment name, hypothesis (description), and feature flag key in
SKILL.md. - Boundary markers: None explicitly defined for the interpolated user strings.
- Capability inventory: Uses
experiment-create,experiment-update, andexperiment-launchas described inSKILL.md. - Sanitization: No specific sanitization or validation instructions are provided for the user-supplied metadata fields.
Audit Metadata