uniform-cdp-personalization
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill establishes a data ingestion pipeline for processing external visitor traits from CDP providers.
- Ingestion points: Untrusted data is retrieved from remote CDP API endpoints (e.g., profiles.segment.com) and identity cookies as described in
segment.mdandaudit.md. - Boundary markers: Absent. The skill relies on programmatic mapping logic rather than explicit LLM boundary markers for the data ingestion flow.
- Capability inventory: Mapped traits are used to drive personalization through
context.update()andhandleUniformRoute(), and are serialized into YAML files for deployment via theuniformCLI. - Sanitization: The
mapping.mdfile defines atraitsToQuirksfunction that performs type validation, casting raw values to strings and applying normalization (trimming and casing) before data is applied to the visitor context. - [SAFE]: The skill correctly manages sensitive credentials by instructing users to store API keys in server-side environment variables and identifies trusted service endpoints for Segment and Uniform.
Audit Metadata