freshdesk-api
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process support ticket data, which contains untrusted content from external users that could be used for injection attacks.
- Ingestion points: Data enters the agent's context through Freshdesk API responses, specifically the
subject,description, andconversation_bodyfields documented inSKILL.mdandreferences/tickets-api.md. - Boundary markers: The instructions do not define specific delimiters or boundary markers for the agent to use when interpreting these external data fields within its own reasoning process.
- Capability inventory: The skill includes instructions for network operations via
curland local file writing (tickets.json) in the common workflow scripts inSKILL.md. - Sanitization: The skill identifies this risk under best practices in
SKILL.md, recommending that users 'Sanitize user input - Prevent injection in descriptions', though no specific implementation is provided for the agent's internal prompt handling.
- [EXTERNAL_DOWNLOADS]: The skill references several external SDKs and libraries to facilitate integration.
- The documentation in
SKILL.mdandreferences/sdk-examples.mdsuggests installing community-maintained SDKs from GitHub repositories (sjkingo/python-freshdesk,kumarharsh/node-freshdesk,snkrheads/freshdesk-ruby) and official package registries (PyPI, NPM, RubyGems). - These references are for established community projects supporting the well-known Freshdesk service.
- [COMMAND_EXECUTION]:
SKILL.mdcontains functional Bash script examples for data management tasks. - Scripts utilize standard system utilities such as
curlfor API interaction,jqfor JSON processing, andpastefor file manipulation. - Examples include exporting tickets to a local
tickets.jsonfile and importing contacts from acontacts.csvfile.
Audit Metadata