user-onboarding
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No evidence of prompt injection or instruction override patterns was found. The skill maintains its intended role without attempting to bypass safety filters or reveal system prompts.
- [DATA_EXFILTRATION]: The skill does not perform any network operations or access sensitive local files. It specifically instructs the agent not to request secrets or personally identifiable information (PII).
- [REMOTE_CODE_EXECUTION]: There are no patterns suggesting the download or execution of external scripts or binaries.
- [COMMAND_EXECUTION]: The skill does not contain shell commands or subprocess calls. Its output is limited to generating structured markdown reports.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests user-provided product data, it lacks the dangerous capabilities (network access, file writes, or code execution) required to exploit this attack surface. The risk is negligible.
- [DYNAMICS]: No dynamic execution (eval/exec) or runtime code generation is present. The '!command' syntax for dynamic context injection was not detected.
- [OBFUSCATION]: All instructions and metadata are in clear text. No hidden characters, Base64 encoding, or homoglyphs were found.
Audit Metadata