customer-success-manager
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill provides local analytical scripts and markdown templates for business use cases.
- [DATA_EXPOSURE]: No hardcoded credentials, API keys, or sensitive file path accesses were found. The scripts operate exclusively on provided input JSON files via command-line arguments.
- [COMMAND_EXECUTION]: The Python scripts (health_score_calculator.py, churn_risk_analyzer.py, expansion_opportunity_scorer.py) use the standard library (argparse, json, sys, datetime) and do not utilize dangerous functions such as os.system(), subprocess.run(), eval(), or exec().
- [EXTERNAL_DOWNLOADS]: The skill does not attempt to download external packages, scripts, or binary files. It adheres to its claim of using the Python standard library only.
- [OBFUSCATION]: Analysis of the markdown and Python source code revealed no signs of obfuscation, including Base64 encoding, zero-width characters, or homoglyph attacks.
- [INDIRECT_PROMPT_INJECTION]: While the skill ingests external JSON data (Category 8), the capability tier is restricted to printing analytical results to stdout. There are no file-write or network-send operations, making the attack surface for injection negligible.
Audit Metadata