churn-cohort-builder
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted free-text data from Zoho Billing reports via the
cancel_reason_rawfield. This data is incorporated into workspace files and previewed in the agent's response, creating a surface for indirect prompt injection.\n - Ingestion points:
cancel_reason_rawfromZohoBilling_get_non_renewing_subscriptions_reportandZohoBilling_get_churned_subscriptions_report(SKILL.md).\n - Capability inventory: Tool execution (Zoho Billing reports) and file system write access to the workspace (SKILL.md).\n
- Boundary markers: The skill does not define specific delimiters or instructional guardrails for the
cancel_reason_rawdata field.\n - Sanitization: No sanitization or validation of the free-text content is performed before it is stored in JSON files or displayed in the preview table.
Audit Metadata