revenuecat-forecasting
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill establishes a workflow where data retrieved from external tools is processed within an executable script environment.
- Ingestion points: Data is sourced from the
get-chart-datatool output as described in SKILL.md. - Boundary markers: There are no instructions for the agent to use specific delimiters or to disregard potential instructions embedded within the retrieved chart data.
- Capability inventory: The skill requires the agent to generate and run a script ('Compute in exactly one script') to perform calculations on the ingested data.
- Sanitization: The skill lacks instructions for sanitizing or validating field values (such as labels or metadata) before interpolating them into the script logic.
Audit Metadata