marketing-mix-modeling-pipeline
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to clone a repository from an unverified GitHub user: https://github.com/francescaetnom-wq/Marketing-Mix-Modeling-End-to-End-Pipeline.git. This external source is not associated with a known trusted organization and could contain unverified code or dependencies.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external CSV files, which creates an attack surface for indirect prompt injection if the data source is not properly controlled.
- Ingestion points: Reads simulated data using pd.read_csv('data/dt_simulated_weekly.csv') in SKILL.md.
- Boundary markers: No safety instructions or delimiters are present to prevent the agent from being influenced by potentially malicious content within the data files.
- Capability inventory: The skill has file system access (read/write) and uses mathematical libraries like statsmodels and scipy for modeling and optimization.
- Sanitization: No data validation or sanitization logic is provided to ensure the integrity of the ingested CSV content.
Audit Metadata