win-loss-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill uses a standard persona-setting technique ("You are a revenue strategist") and does not contain instructions to bypass safety filters or ignore prior rules.
- [DATA_EXFILTRATION]: No unauthorized data access or network transmission patterns were detected. The skill's request for local files (e.g.,
.agents/sales-context.md) and user-provided deal data is consistent with its stated purpose of business analysis. - [REMOTE_CODE_EXECUTION]: No remote code execution or external script downloads are present in the skill.
- [OBFUSCATION]: All content is provided in plain text with no evidence of Base64 encoding, hidden Unicode characters, or other obfuscation techniques.
- [DYNAMIC_CONTEXT_INJECTION]: The skill does not utilize dynamic context injection commands (e.g.,
!commandsyntax). - [INDIRECT_PROMPT_INJECTION]: While the skill processes external data like call transcripts and CRM notes, it lacks executable capabilities (like network access or shell command execution) that would typically be targeted by indirect injection attacks.
Audit Metadata