clarify-api
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of untrusted data from the Clarify CRM API, which could be exploited to influence agent behavior through embedded instructions.
- Ingestion points: The agent reads data from API responses described in SKILL.md, including resource attributes from
GET /objects/{object}/resourcesand transcriptions fromPOST /meetings/{id}/recordings/{id}/artifacts. - Boundary markers: No specific delimiters or instructions to ignore instructions within the API data are provided in the skill.
- Capability inventory: The agent is instructed on how to perform CRUD operations (create, read, update, delete) on records and manage relationships within the workspace as documented in SKILL.md.
- Sanitization: There is no evidence of content validation or sanitization for the data retrieved from the API.
Audit Metadata