pipeline-review
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of text-based instructions and frameworks for sales analysis. No malicious instructions, obfuscated commands, or attempts to override agent safety protocols were detected.- [SAFE]: There are no network requests (curl/wget), hardcoded credentials, or remote code execution patterns. All operations are local to the agent's dialogue and analysis.- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from a project file named '.agents/sales-context.md'.
- Ingestion points: Reads '.agents/sales-context.md' from the project root.
- Boundary markers: None present.
- Capability inventory: The skill has no capabilities to execute commands, write files, or access the network.
- Sanitization: No specific sanitization of the input file content is performed.
- Note: While the input is untrusted, the lack of dangerous capabilities makes the injection surface non-exploitable for system-level attacks.
Audit Metadata