skills/thinkingaiagenticengine/scenario-skills/filter-result-deviation-troubleshooting/Gen Agent Trust Hub
filter-result-deviation-troubleshooting
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of an internal
ae-clitoolset to perform complex data operations. This includes fetching report definitions (analysis report get), running ad-hoc queries (analysis adhoc run), and creating persistent data structures like user clusters (analysis user-cluster create) and user tags (analysis user-tag create). These tools provide significant capabilities for interacting with the underlying data platform. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process potentially untrusted data from the analytics platform, creating a surface for indirect prompt injection.
- Ingestion points: Data enters the agent's context through tools like
ae-cli analysis report-data run,ae-cli analysis event-detail run, andae-cli analysis-meta property list(in SKILL.md). - Boundary markers: The instructions lack explicit boundary markers or instructions for the agent to ignore potentially malicious content embedded within the fetched report definitions or event properties.
- Capability inventory: The agent has the capability to write to the system (creating clusters and tags) and execute dynamic SQL queries based on gathered data.
- Sanitization: There is no documented requirement for the agent to sanitize or validate the content of the data retrieved via the CLI tools before using it in reasoning or subsequent commands.
Audit Metadata