charliehr

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references and fetches API specifications from specs.apideck.com and connector configuration metadata from unify.apideck.com. These are official vendor resources controlled by Apideck.
  • [COMMAND_EXECUTION]: The skill documentation includes curl command examples intended for developers to verify connector coverage and utilize the Apideck Proxy API. These commands are utility-focused and utilize user-provided environment variables for authentication.
  • [INDIRECT_PROMPT_INJECTION]: As a data-processing skill, it ingests employee, payroll, and time-off data from CharlieHR's external API. This creates a potential surface for indirect prompt injection if the data within the HRIS platform were to contain malicious instructions, though this is a standard characteristic of integration tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 11:54 AM