sdworx-webservice

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns were detected in this skill. The instructions and code examples provide legitimate integration patterns for the SD Worx service via the Apideck platform.
  • [EXTERNAL_DOWNLOADS]: The skill contains curl commands and links referencing unify.apideck.com, specs.apideck.com, and developers.apideck.com. These are official vendor resources used for API coverage checks and the Proxy API escape hatch, representing standard functional requirements for the integration.
  • [CREDENTIALS_UNSAFE]: The skill correctly instructs the use of environment variables (e.g., process.env.APIDECK_API_KEY) and placeholders in examples, avoiding the exposure of hardcoded secrets.
  • [INDIRECT_PROMPT_INJECTION]: While the skill defines a surface for processing HRIS data (employees, payroll, etc.), it does not include instructions that would make the agent vulnerable to interpreting data as commands. The implementation follows a standard schema-driven approach.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 06:32 PM