lucca-hr

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and integration examples for the Lucca connector. All code samples utilize best practices for secret management, such as using environment variables (APIDECK_API_KEY) and managed authentication via Apideck Vault.
  • [EXTERNAL_DOWNLOADS]: The skill references the @apideck/unify Node.js package and official API specifications from Apideck and Lucca. These references target the vendor's own official infrastructure and documentation, which is consistent with the skill's primary purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines methods to ingest data from Lucca (employees, time-off records). While this represents a data ingestion surface, the skill does not provide any functionality to execute retrieved data or perform unsafe shell operations, minimizing the risk of indirect injection attacks.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 11:54 AM