customer-success-playbook-matcher
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes structured input (JSON/CSV) which could contain malicious instructions meant to influence the agent's behavior during analysis.\n
- Ingestion points: The
run.pyscript reads content from the file path provided in the--inputargument.\n - Boundary markers: No specific delimiters or instructions to ignore embedded commands are present in the script or instructions to isolate data from the agent's reasoning process.\n
- Capability inventory: The skill can read files, create directories, and write output files to the local filesystem via the
run.pyutility.\n - Sanitization: No validation, escaping, or sanitization of the input data is performed before the agent processes the findings.
Audit Metadata