factorialhr
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates processing external HRIS data from Factorial, which introduces a potential vector for indirect instructions.
- Ingestion points: HRIS API endpoints such as employees.list in SKILL.md.
- Boundary markers: The instructions do not define specific delimiters for separating data from instructions.
- Capability inventory: The skill enables reading HRIS records and performing network requests to downstream Factorial APIs via a Proxy endpoint.
- Sanitization: Not explicitly documented in the integration examples.
Audit Metadata