retention-and-winback
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of markdown documentation and strategic frameworks for retail marketing. No code or executable scripts are present in the provided files.
- [SAFE]: No sensitive data exposure or exfiltration patterns were detected. The skill's recommendation for the agent to check existing context in local files (e.g.,
.agents/marketing-strategy.md) is a standard practice for gathering domain-specific context and does not target sensitive system or credential files. - [SAFE]: No remote code execution or unverifiable dependencies were found. The tool integration section lists well-known SaaS platforms (like Smile.io, Zendesk, Yotpo) as examples for the agent to consider, but does not provide commands to install or execute them.
- [SAFE]: No obfuscation, persistence mechanisms, or privilege escalation attempts were identified. The instructions are transparent and follow industry-standard retail marketing practices.
- [SAFE]: While the skill ingests data from local strategy files (Category 8: Indirect Prompt Injection), it lacks the capabilities (such as file-writing, network sending, or command execution) required to exploit such a surface. The ingestion of these files is restricted to gathering marketing context.
Audit Metadata