analyze-campaign-roi
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes campaign and conversion data from external affiliate network APIs and trackers (e.g., Voluum, Binom, Keitaro). If these external services provide malicious instructions instead of data, they could influence agent behavior.
- Ingestion points: External data is pulled from affiliate network APIs and tracker platforms (SKILL.md).
- Boundary markers: No explicit delimiters or boundary markers are defined for the ingested data stream.
- Capability inventory: The skill has access to
execute_command,read_file,write_file, andedit_file(SKILL.md). - Sanitization: The skill includes internal guardrails (ASI04 and ASI05) recommending endpoint validation and the avoidance of dynamic query construction from untrusted inputs.
- [COMMAND_EXECUTION]: The skill is granted the
execute_commandtool, allowing it to run shell commands on the host system. This capability significantly increases the potential impact of an indirect prompt injection attack.
Audit Metadata