north-star-metrics
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill instructions focus on business metric strategy and do not contain attempts to bypass safety filters or override agent behavior.
- [DYNAMIC_CONTEXT_INJECTION]: No load-time shell command execution patterns were found in the skill files.
- [EXTERNAL_DOWNLOADS]: The skill references external resources including industry newsletters, product analytics blogs, and Google Sheets templates. These are well-known educational sources and do not involve executable payloads or suspicious download-and-execute patterns.
- [OBFUSCATION]: No encoded text, zero-width characters, or homoglyph-based URL spoofing were detected in the content.
- [DATA_EXFILTRATION]: The skill does not contain logic to access sensitive system files or credentials, nor does it perform unauthorized network transmissions. Hardcoded identifiers found are for public Google Sheets templates.
- [DYNAMIC_EXECUTION]: There is no evidence of runtime code generation, unsafe deserialization, or dynamic script execution. The instructions are purely textual and diagnostic for the user.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests user descriptions of business models and KPIs, it lacks the necessary capabilities (such as file-writing or subprocess execution) to be leveraged for a successful attack via data poisoning.
Audit Metadata