revenue-forecast-writer
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves a legitimate business purpose, providing a methodology for revenue forecasting. It does not contain any code or instructions that interact with the system or network in a malicious way.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided data such as revenue targets and current plans. While it lacks explicit input sanitization or boundary markers for these inputs, its capabilities are limited to generating document structures (Notion, Markdown, DOCX, XLSX) and narrative prose. It does not execute dynamic code or perform network operations based on this data, representing a negligible risk surface.
- [OBFUSCATION]: The skill includes Ukrainian and Russian translations for instructional labels (e.g., 'Припущення', 'Прогноз'). These are legitimate non-English instructional strings for internationalization and do not exhibit homoglyph patterns or hidden character attacks aimed at spoofing Latin-script identifiers.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns, package installations, or external script downloads were detected. References to internal packs like 'gtm-skills' or 'sales-engine-skills' appear to be internal organizational identifiers for related agent tools rather than external dependencies.
Audit Metadata