sales-pipeline-analyst
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Analysis of the skill instructions and scripts reveals no evidence of malicious intent, prompt injection, or obfuscation. The skill operates within the scope of a revenue operations analyst.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits a potential surface for indirect prompt injection as it is designed to process untrusted external data (CRM pipeline snapshots). However, since the skill does not utilize high-risk tools (e.g., shell execution, network requests, or file writes), the risk is negligible.
- Ingestion points: SKILL.md (Workflow Step 1) specifies pulling deal-level pipeline snapshots.
- Boundary markers: None identified in the prompt templates.
- Capability inventory: No executable capabilities or network tools are requested or used within the skill files.
- Sanitization: The instructions do not specify sanitization for incoming CRM data, but the output is restricted to markdown reports.
Audit Metadata