revenue-operations
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFENO_CODEPROMPT_INJECTION
Full Analysis
- [SAFE]: Analysis of the instructions, metadata, and provided assets revealed no malicious intent, prompt injection attempts, or unauthorized data access patterns. The skill adheres to its stated purpose of providing business operations support.\n- [NO_CODE]: The skill references multiple Python scripts (e.g.,
pipeline_analyzer.py,forecast_accuracy_tracker.py, andgtm_efficiency_calculator.py) in its usage instructions, but these executable files are not present in the analyzed skill package. The provided assets consist solely of documentation and data templates.\n- [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it is designed to ingest and process external JSON files containing sales and revenue data.\n - Ingestion points: Processes
current_pipeline.json,forecast_history.json, andquarterly_data.jsonas input for analysis scripts in SKILL.md.\n - Boundary markers: No specific delimiters or instructions to ignore embedded prompts in the source data are provided in the documentation.\n
- Capability inventory: Instructs the agent to execute shell commands for running Python scripts (pipeline_analyzer.py, etc.) to process the ingested data.\n
- Sanitization: No data validation or sanitization steps are defined in the provided instruction set.
Audit Metadata