configuring-ai-agents
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a configuration guide and reference for AI-driven import steps. It defines how data flows from records into AI models and back into integration pipelines.
- [SAFE]: All external references, such as model providers (OpenAI, Google Gemini, Anthropic) and CLI commands (celigo), are standard industry services or vendor-specific tools related to the skill's purpose.
- [SAFE]: The documentation includes security-focused components, such as
GuardrailImportfor PII detection and content moderation, which provide built-in safety mechanisms for the configured agents. - [PROMPT_INJECTION]: The skill describes an architecture where AI agents ingest potentially untrusted record data and have access to tools (MCP, web search). While this represents a standard attack surface for LLM-based systems, the skill provides the configuration necessary to implement guardrails as a mitigation strategy.
- Ingestion points: Records are mapped to
text,record, orfilesfields inSKILL.md. - Boundary markers: None explicitly required in the input mapping, though system instructions are emphasized as the primary behavior definition.
- Capability inventory: Support for
web_search,mcp(Model Context Protocol) tools,celigotools, andimage_generationacrossSKILL.mdandaiagent.yml. - Sanitization: The skill documents
GuardrailImportspecifically for filtering PII and moderated content inguardrail.yml.
Audit Metadata