create-batch
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill transmits recipient information and dynamic variables extracted from user-provided CSV files to the Bolna API (api.bolna.ai).
- The
scripts/create_batch.pyscript reads local CSV files and sends the content via multipart form POST requests to the vendor's infrastructure. - The
scripts/monitor_batch.pyscript performs GET requests to the vendor's API to track campaign status and execution details. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data files that are used to populate variables in AI agent prompts, creating a potential surface for indirect injection.
- Ingestion points: The
create_batch.pyscript ingests data from local CSV files specified via the--fileargument. - Boundary markers: No explicit delimiters or boundary instructions are used to separate CSV data from the agent's system instructions.
- Capability inventory: The skill includes scripts capable of local file system reads and network communication with the vendor API.
- Sanitization: The skill does not perform sanitization or filtering of the CSV content prior to transmission to the API.
Audit Metadata