cross-source-analysis
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a vulnerability surface for indirect prompt injection. It is designed to ingest and process data from external, potentially attacker-controlled sources such as Gong call transcripts, support tickets (Zendesk/Pylon), and community engagement signals (Common Room). An attacker could place malicious instructions within these sources to influence the agent's behavior during analysis.
- Ingestion points: Data enters the agent context from BigQuery, HubSpot, Pylon, Zendesk, Common Room, Gong, Prometheus, Grafana, Jira, Stripe, and PostHog via the
provider-api-requesttool. - Boundary markers: The instructions do not include boundary markers or specific guidance to the agent to disregard instructions embedded within the retrieved data.
- Capability inventory: The skill utilizes powerful capabilities including
provider-api-requestfor network interaction, andsave-analysisandadhoc-analysisfor persisting data and findings. - Sanitization: There is no evidence of content sanitization, escaping, or validation performed on the external data before it is processed or saved to intermediate storage.
Audit Metadata