catalyst-signals
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a documentation guide for Catalyst Signals. All described interactions occur within the Zoho Catalyst ecosystem, and the instructions focus on project configuration and console-based setup. No malicious patterns or security bypasses were detected in the instructions.- [INDIRECT_PROMPT_INJECTION]: The skill documents a platform designed to ingest external events into serverless targets, creating a potential ingestion surface for untrusted data.
- Ingestion points: Custom publisher REST API URLs in references/signals-basics.md.
- Boundary markers: None explicitly mentioned for payload content within the instructions.
- Capability inventory: Functions, Circuits, and Webhooks specified in references/signals-basics.md.
- Sanitization: Mentions event schema validation for custom publishers in references/signals-basics.md.
Audit Metadata