business-pulse
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Handling of Untrusted External Content: The skill processes information from external sources that are not under the direct control of the user, specifically Gmail threads, Slack messages, and customer support conversations.
- Ingestion points: Data is ingested through tool calls like
search_threadsfor Gmail and Slack search, as specified inreference/data_sources.md. - Boundary markers: The instructions do not define specific delimiters or warnings to ignore potentially conflicting instructions embedded within these external messages.
- Capability inventory: The skill possesses the ability to write to the file system and post summaries to Slack (as described in Step 5 of
SKILL.md). - Sanitization: No specific sanitization or filtering logic for the content of messages is detailed in the synthesis instructions.
- Automated Data Access: The skill is configured to automatically pull data from connected financial and communication tools upon invocation without requiring per-run user confirmation.
- This design is intended to minimize latency and improve the user experience for a reporting tool, granting the agent immediate access to the configured data sources once triggered (documented in
SKILL.mdandreference/gotchas.md). - A safety checkpoint is included for writing operations, requiring explicit user approval before posting data to external communication channels such as Slack.
Audit Metadata