analyzing-funnel-correlation
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill enables the agent to perform data analysis by executing HogQL queries via the
execute-sqltool.\n- [DYNAMIC_EXECUTION]: The skill uses SQL templates inSKILL.mdthat the agent modifies at runtime to accommodate specific user funnel definitions.\n- [INDIRECT_PROMPT_INJECTION]: The skill has a data ingestion surface for user-defined funnel steps.\n - Ingestion points: Step events and date ranges provided by the user are used to populate the HogQL queries described in
SKILL.md.\n - Boundary markers: No specific boundary markers or instructions to isolate user-provided strings are present.\n
- Capability inventory: The skill uses
execute-sql,query-funnel, andinsight-getas documented inSKILL.md.\n - Sanitization: No explicit sanitization logic is provided; the agent is expected to manually verify and fix step filters based on the results.
Audit Metadata