signals-scout-revenue-analytics
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions define a specialized monitoring role with clear operational boundaries. It uses platform-provided tools for orientation, data exploration, and reporting within a scoped environment.
- [PROMPT_INJECTION]: The skill processes untrusted external data, creating a potential surface for indirect injection.
- Ingestion points: The agent context receives untrusted data from
external-data-sync-logs(error patterns) andexternal-data-sources-retrieve(error strings) as described inSKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the guidelines for handling external data.
- Capability inventory: The skill utilizes
execute-sqlfor database queries,scout-scratchpad-rememberfor persistent memory, andscout-emit-report/scout-edit-reportfor outputting findings, as specified inSKILL.md. - Sanitization: The instructions do not define specific sanitization or filtering protocols for external content before it is used in downstream tools.
Audit Metadata