churn-prevention
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill consists of instructional content and strategic guidelines for SaaS business operations.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies an ingestion point for untrusted data by instructing the agent to read context from external files such as
.agents/product-marketing.md. While this represents a potential attack surface, the behavior is a standard context-gathering practice and the skill does not attempt to exploit it. Ingestion points: .agents/product-marketing.md (and variants). Boundary markers: Not explicitly defined. Capability inventory: The skill suggests using established CLI tools (Stripe, PostHog, Customer.io) for implementation. Sanitization: No explicit sanitization of the ingested file content is specified. - [EXTERNAL_DOWNLOADS]: The skill references several well-known and reputable third-party services (e.g., Stripe, Chargebee, PostHog, Mixpanel) for subscription management and analytics. These references are appropriate for the skill's domain and do not involve suspicious remote code execution.
Audit Metadata