change-history
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to execute a local script
scripts/api-request.shfor all API operations, which is the primary mechanism for its functionality. - [DYNAMIC_EXECUTION]: The skill utilizes
eval $(api --env)to load environment variables such asTOKENandAD_ACCOUNT_IDfrom the output of an internal helper script, following standard configuration practices for this environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data retrieved from the Spotify Ads API, presenting an attack surface for indirect instructions.
- Ingestion points: API response bodies containing change history records (SKILL.md).
- Boundary markers: None specified in the display instructions to separate data from instructions.
- Capability inventory: The skill has access to
Bash,Read, andAskUserQuestiontools (SKILL.md). - Sanitization: The instructions do not define explicit sanitization for API-returned strings like entity names or change values before rendering them to the agent.
Audit Metadata