trials-expiring
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns were detected. The skill performs read-only operations using official Zoho Billing tools to display trial statuses and does not engage in remote code execution, network exfiltration, or unauthorized file access.
- [INDIRECT_PROMPT_INJECTION]: The skill processes subscription data from the Zoho Billing API, which represents a potential surface for indirect prompt injection if customer or plan names contain malicious instructions.
- Ingestion points: Trial subscription data retrieved via
ZohoBilling_List_all_SubscriptionsinSKILL.md. - Boundary markers: None explicitly defined to separate fetched data from instructions in the tabular output.
- Capability inventory: The skill only utilizes listing tools (
ZohoBilling_List_all_Organizations,ZohoBilling_List_all_Subscriptions) and lacks any capabilities for command execution, file system modification, or external network requests. - Sanitization: No specific sanitization is performed on the data before display, but the lack of dangerous tools makes the risk negligible.
Audit Metadata