analytics-usage-analyzer
Pass
Audited by Gen Agent Trust Hub on Oct 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external structured data (JSON/CSV) provided through file paths, which creates a potential surface for indirect prompt injection if malicious instructions are embedded in the source data.
- Ingestion points: The
run.pyscript reads data from an external file path supplied via the--inputcommand-line argument. - Capability inventory: The script possesses capabilities to read from and write to the local filesystem using
pathliband standard file operations. - Boundary markers: There are no explicit delimiters or instructions provided to the model to differentiate between data and potentially embedded instructions.
- Sanitization: No validation or sanitization of the input file's content is implemented before the data is processed by the script.
Audit Metadata