win-loss-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill provides a structured method for sales analysis and includes a local JavaScript engine (
resources/win-loss.js) for performing calculations. - [SAFE]: The JavaScript engine is deterministic and performs purely mathematical operations on deal data (sums, averages, win rates). It does not perform network requests, file system writes, or subprocess execution.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data in the form of closed deal lists provided by the user. However, the analysis process and the accompanying script do not include any high-risk capabilities (like
eval,exec, or network exfiltration) that could be triggered by malicious strings in the input data. Data ingestion points include deal names, segments, and loss reasons, which are sanitized via basic string trimming and type conversion inresources/win-loss.js.
Audit Metadata