connect-apps
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires installation of the 'composio-toolrouter' plugin. This brings external code into the agent's environment from Composio, which is a recognized service provider for agentic tool integration.
- [COMMAND_EXECUTION]: Instructions direct the user to run setup commands ('/plugin install' and '/composio-toolrouter:setup') within the agent's environment to finalize the integration.
- [PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection (Category 8) by allowing the agent to process data from external applications. Ingestion points: External data from connected apps such as Gmail messages, Slack threads, and GitHub issues. Boundary markers: The provided documentation does not specify the use of delimiters or 'ignore' instructions for external data. Capability inventory: The integration provides broad capabilities including sending emails, posting chat messages, and creating documentation in services like Notion and Google Docs. Sanitization: No explicit sanitization or filtering of external data is mentioned in the skill instructions.
Audit Metadata