payment-failure-diagnosis
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input through the
$ARGUMENTSvariable to query billing and error databases. - Ingestion points: User-supplied customer names, subscription IDs, or error codes in
SKILL.md. - Boundary markers: No delimiters or safety instructions are present to prevent the agent from interpreting embedded instructions within the input data.
- Capability inventory: The skill uses
ZohoBilling_tools to read sensitive customer information, subscriptions, and failure reports. It explicitly restricts behavior to "propose-only," preventing unauthorized retries or changes. - Sanitization: There is no mention of input validation or escaping before interpolation into the search queries.
Audit Metadata