blackbaud
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references OpenAPI specifications and connector metadata from Apideck's official infrastructure (specs.apideck.com, unify.apideck.com). These resources are official components of the service provider integration.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external CRM data from Blackbaud, representing a potential surface for indirect prompt injection if retrieved content is not properly sanitized.
- Ingestion points: Contacts, companies, leads, and opportunities retrieved via CRM API calls.
- Boundary markers: None defined within the skill instructions.
- Capability inventory: The skill enables listing, searching, reading, and writing CRM records.
- Sanitization: No sanitization methods are specified in the provided documentation.
Audit Metadata