autopilot-status
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script to perform health monitoring and reporting tasks.
- Evidence: Invokes
campaign-health-monitor.pywith subcommandshealth-score,corrections-history, andsavings-report. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by ingesting data from external configuration files and agency SOPs.
- Ingestion points: Reads brand profile data from
~/.claude-marketing/brands/{slug}/profile.jsonand agency procedures from~/.claude-marketing/sops/. - Boundary markers: No clear delimiters or instructions to ignore embedded commands are present in the skill description.
- Capability inventory: The skill has the ability to execute shell commands via the
campaign-health-monitor.pyscript. - Sanitization: No sanitization or validation of the content within the JSON profiles or SOP files is documented.
Audit Metadata