skills/reason-machines/marketing-skills/marketing-mix-modeling-end-to-end-pipeline/Gen Agent Trust Hub
marketing-mix-modeling-end-to-end-pipeline
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's installation instructions include cloning a repository from an unverified GitHub user:
- Evidence:
git clone https://github.com/francescaetnom-wq/Marketing-Mix-Modeling-End-to-End-Pipeline.gitinSKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill creates a vulnerability surface by ingesting external data without validation or sanitization.
- Ingestion points: The skill reads marketing data from CSV files, such as
data/dt_simulated_weekly.csv, throughout the modeling process. - Boundary markers: None present. The instructions do not include warnings for the agent to ignore potentially malicious content within the processed data.
- Capability inventory: The skill performs file system reads (
pd.read_csv), file system writes (df.to_csv), and complex statistical computations usingstatsmodelsandscipy. - Sanitization: No sanitization or schema validation is implemented for the input data before it is processed by the modeling and optimization functions.
Audit Metadata