revenuecat-status
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill accepts a user-provided
project_nameargument which is used to filter data retrieved from external tools. - Ingestion points: User input via
$ARGUMENTSinSKILL.md. - Boundary markers: None present; the skill does not explicitly instruct the agent to ignore instructions embedded within the metadata or project names it processes.
- Capability inventory: Uses
list-projects,list-apps,list-products,list-entitlements,list-offerings, andlist-webhook-integrationstools to read configuration data. - Sanitization: No explicit validation or sanitization of the input argument is defined, potentially allowing the input to influence the agent's behavior during the summarization phase.
Audit Metadata