revenue-management
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTIONNO_CODE
Full Analysis
- [DATA_EXFILTRATION]: The skill accesses the
~/.claude/projects/directory to read and write execution metadata inskill-telemetry.md. While this is intended for platform-specific telemetry, it involves accessing a hidden configuration directory outside the project root. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it is designed to ingest and process untrusted external data from pricing engines, reservation systems, and competitive rate feeds.
- Ingestion points: System Discovery (Step 1.1) and Data Feeds (Step 1.3) reference historical booking data, competitive rate shopping feeds, and web analytics.
- Boundary markers: No boundary markers or 'ignore embedded instructions' warnings are present to delimit external data from agent instructions.
- Capability inventory: The skill has the capability to write files to the local filesystem (docs/revenue-management-analysis.md and ~/.claude/projects/skill-telemetry.md).
- Sanitization: No sanitization, escaping, or validation logic for external content is described in the instructions.
- [NO_CODE]: The skill consists entirely of markdown instructions and does not include any accompanying executable scripts or configuration files.
Audit Metadata