skills/thinkingaiagenticengine/scenario-skills/engagement-effectiveness-analysis/Gen Agent Trust Hub
engagement-effectiveness-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses subprocess.run() in several scripts (_ae.py, _env.py, check_prerequisites.py, selftest_gates.py) to invoke the ae-cli tool and manage Python environments. These calls are essential for the skill's operation and incorporate input validation via validate_params.py.- [EXTERNAL_DOWNLOADS]: scripts/_env.py contains logic to automatically create a virtual environment and install the openpyxl package from a standard registry if it is not found on the system. This is done to ensure the skill is portable across different environments.- [DATA_EXFILTRATION]: The skill includes a proactive security measure in scripts/validate_report.py which scans generated reports for potential secrets, credentials, internal IP addresses, and local file paths before delivery, ensuring no sensitive data is leaked.- [INDIRECT_PROMPT_INJECTION]: Data retrieved from external API calls is processed and rendered into reports. The skill implements HTML escaping in scripts/generate_report.py to prevent potential cross-site scripting or other injection attacks when the reports are viewed in Markdown renderers.
Audit Metadata