marketing-productivity-optimizer
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements its logic through specialized Python scripts (analyze_item.py, parse_ad_data.py, generate_ad_report.py) that utilize standard libraries for data parsing and reporting. The scripts do not perform network operations, access sensitive file paths, or attempt to modify system configurations.\n- [COMMAND_EXECUTION]: The skill instructions specify the use of local scripts to process marketing data (e.g.,
python scripts/parse_ad_data.py). This activity is restricted to the execution of the skill's own distributed code and does not involve elevated privileges or the execution of arbitrary, user-supplied commands.\n- [PROMPT_INJECTION]: The skill processes external data which presents a surface for indirect prompt injection.\n - Ingestion points: Untrusted data enters the agent context through the
item_descriptionandad_dataparameters defined in SKILL.md.\n - Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within the ingested data.\n
- Capability inventory: The skill's capabilities are limited to text analysis and numeric metric calculation; it lacks the network or system-level permissions required for high-impact exploitation.\n
- Sanitization: Input is passed to scripts that enforce structured data formats (CSV/JSON) or use regex to extract metrics, providing a layer of validation against unstructured prompt injection.
Audit Metadata