sesamehr
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to fetch data from an external source (Sesame HR API), which could theoretically contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: External data enters the agent's context via the HTTP response body returned from
https://unify.apideck.com/proxy(SKILL.md). - Boundary markers: None explicitly defined in the instructions; the agent relies on its own internal safety guardrails for handling tool output.
- Capability inventory: The skill enables the agent to perform authenticated network operations using tools like
curl(SKILL.md). - Sanitization: The skill does not provide specific instructions for sanitizing or escaping the data returned from the API before processing it.
Audit Metadata