HR Onboarding
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process information from new hires, including personal details, tax documentation, and orientation feedback, which creates a surface for indirect prompt injection.
- Ingestion points: Employee documentation such as I-9, W-4, and tax forms, orientation feedback surveys, and direct communications with new hires as described throughout SKILL.md.
- Boundary markers: The instructions lack specific guidance on using delimiters or warnings for the agent to ignore instructions that might be embedded within employee-provided data.
- Capability inventory: The skill describes administrative tasks including record management in HRIS platforms and communication with managers, but it does not include tools or scripts for arbitrary command execution or external network operations.
- Sanitization: No sanitization or validation mechanisms are defined for the agent when processing external documents or user-provided strings.
Audit Metadata