enterprise-integration
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized command execution detected in the skill instructions. The content provides purely architectural and defensive guidance.
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for processing data from external enterprise systems (Salesforce, SAP). It addresses potential injection risks by mandating defensive measures.
- Ingestion points: External data enters the context via legacy systems, Salesforce, and SAP APIs as described in SKILL.md.
- Boundary markers: Explicit instructions require the implementation of an Anti-Corruption Layer (ACL) to delimit systems.
- Capability inventory: No subprocess calls, network exfiltration, or file system modifications are present in the skill code.
- Sanitization: The skill mandates aggressive sanitization of legacy payloads to prevent XXE and SQLi attacks (SKILL.md).
Audit Metadata