flexmail
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and fetches resources from official vendor domains including
specs.apideck.comfor API specifications andunify.apideck.comfor connector configuration data.\n- [INDIRECT_PROMPT_INJECTION]: The skill enables the agent to ingest and process data from external Flexmail API endpoints, which could contain malicious instructions.\n - Ingestion points: Data is retrieved from Flexmail via CRM unified API methods such as
apideck.crm.contacts.listas described inSKILL.md.\n - Boundary markers: The instructions do not define specific delimiters or warnings to help the agent distinguish between its core instructions and data fetched from the API.\n
- Capability inventory: The skill provides capabilities to read, search, and write records (contacts, leads, companies) within the CRM environment.\n
- Sanitization: There are no specific instructions for sanitizing or validating data retrieved from the external service before it is used by the agent.
Audit Metadata