19-lifecycle-orchestration
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill does not contain instructions that attempt to bypass safety filters, override system constraints, or extract sensitive internal prompts. The logic is strictly focused on the stated purpose of lifecycle orchestration.- [DATA_EXPOSURE_&_EXFILTRATION]: No hardcoded credentials, sensitive file paths, or unauthorized network operations were identified. Mentions of external platforms (AWS, Braze, HubSpot) are used as citations for business logic and do not facilitate data exfiltration.- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing external contact and message data.
- Ingestion points: The skill processes contact attributes (ID, jurisdiction, consent) and message metadata (flow ID, entity ID).
- Boundary markers: The instructions contain a safety instruction to "return
HOLDrather than inventing missing values," which serves as a data validation boundary. - Capability inventory: The skill does not perform shell executions, network calls, or file writes; it is limited to data evaluation logic.
- Sanitization: The skill relies on deterministic decision tables and does not interpolate untrusted data into executable contexts.
Audit Metadata