pennylane
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides documentation for the Pennylane connector within the Apideck ecosystem. All referenced resources, including domains (apideck.com) and the official SDK (@apideck/unify), belong to the recognized vendor.
- [INDIRECT_PROMPT_INJECTION]: The skill provides an interface to ingest data from Pennylane (invoices, bills, journal entries) via the Accounting unified API. This constitutes a potential attack surface for indirect prompt injection if the source data contains malicious instructions, which is a common characteristic of data integration tools. No specific exploitation patterns were observed.
Audit Metadata