sales-forecast-analyzer
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides a clean reference implementation for data analysis. It uses standard Python libraries for processing local files without any network connectivity or external script execution. All operations are local and triggered by explicit command-line arguments.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a documented attack surface for indirect prompt injection as it processes external data files; however, the current implementation is a passive scaffold without complex LLM logic.
- Ingestion points: The run.py script reads data from an external file specified by the --input argument.
- Boundary markers: No delimiters or ignore-instructions are present in the SKILL.md or run.py implementation.
- Capability inventory: The skill has permission to read from and write to the local file system.
- Sanitization: No input validation or sanitization is performed on the ingested JSON data before processing.
Audit Metadata