live-penetration-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains well-defined instructions for a specialized data analysis task. It follows best practices for tool use, including pre-execution environment checks and explicit user confirmation for project selection.\n- [COMMAND_EXECUTION]: The skill uses local scripts (scripts/ae_query.sh and scripts/dim_analyzer.py) to automate interactions with the ae-cli tool. This is standard behavior for an agent performing data analysis tasks and does not involve unauthorized command execution or privilege escalation.\n- [INDIRECT_PROMPT_INJECTION]: While the skill processes external data (analytics event logs), it does so by first passing the data through a Python-based analyzer. This script-based processing layer helps sanitize and aggregate data into numeric summaries before the agent interprets it, effectively mitigating the risk of indirect prompt injection from raw log content.\n- [EXTERNAL_DOWNLOADS]: The skill does not download or execute any external scripts or packages. It relies solely on the provided local scripts and pre-existing system tools like python3 and ae-cli.
Audit Metadata