funnel-analysis
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- Overall Assessment (SAFE): No malicious behavior or security risks were identified. The skill is focused on standard business metrics analysis.
- Category 8: Indirect Prompt Injection (SAFE): The skill ingests external data for funnel calculations. Ingestion points: Data is loaded via pandas in example scripts. Boundary markers: Not present, but data is treated as numerical/categorical input for statistical functions. Capability inventory: Includes file writing (HTML reports) and tool execution (Bash). Sanitization: Data is used for visualizations and report generation rather than being interpolated into language model prompts, significantly reducing the surface for injection attacks.
- Dependency Analysis (SAFE): All listed dependencies (pandas, plotly, matplotlib, numpy, seaborn) are standard, trusted libraries in the data science ecosystem.
Audit Metadata