apideck-php
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the
apideck-libraries/sdk-phplibrary from Packagist, the official PHP package repository. This is the official SDK provided by the vendor. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of data from various third-party platforms (such as CRMs and accounting software) via the Apideck Unified API.
- Ingestion points: External data is retrieved using methods like
$sdk->crm->contacts->list()and$sdk->accounting->invoices->list()as shown inSKILL.md. - Boundary markers: The provided code snippets do not include delimiters or instructions to the agent to treat retrieved data as untrusted content.
- Capability inventory: The skill enables network communication with external APIs using the SDK's client methods.
- Sanitization: The example code iterates through and outputs data fields (e.g.,
$contact->name) without demonstrating sanitization or validation of the content retrieved from external sources.
Audit Metadata