microsoft-dynamics-hr
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external HRIS endpoints, which constitutes a potential attack surface for indirect instructions. \n- Ingestion points: Employee records, payroll data, and time-off requests are retrieved from Microsoft Dynamics 365 Human Resources via the Apideck HRIS API (SKILL.md). \n- Boundary markers: The provided instructions do not include specific delimiters or guardrails for isolating external data from the agent's system prompt. \n- Capability inventory: The skill allows for listing and syncing organizational data using the
@apideck/unifySDK and provides a Proxy API for direct downstream communication. \n- Sanitization: The instructions do not specify any validation or filtering mechanisms for the data returned from the external API service.
Audit Metadata