monday
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents legitimate integration procedures for the monday.com platform through the Apideck proxy service. All technical instructions align with the stated purpose of providing an API connector.
- [DATA_EXPOSURE]: The skill demonstrates secure handling of authentication credentials by using environment variable placeholders (e.g.,
${APIDECK_API_KEY},${APIDECK_APP_ID},${CONSUMER_ID}) in its code examples, avoiding hardcoded secrets. - [EXTERNAL_DOWNLOADS]: External links and API endpoints reference official and well-known domains associated with the service provider (apideck.com) and the target platform (monday.com).
- [INDIRECT_PROMPT_INJECTION]: While the skill establishes a path for the agent to ingest external data from the monday.com API, it is a standard implementation of a connector skill. The attack surface is typical for API-based agents and no malicious patterns were detected in the instructions.
Audit Metadata