crontap-retries-and-idempotency
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and analyze output from the
get_schedule_historytool to classify failures. This introduces a potential surface where malicious content embedded in job failure messages or history metadata could influence agent behavior. - Ingestion points: Output from the
get_schedule_historytool referenced in the workflow and examples. - Boundary markers: Absent. No instructions are provided to the agent to treat history data as untrusted or to use specific delimiters.
- Capability inventory: The skill utilizes the
update_scheduletool to modify configuration and includescurlexamples for network operations. - Sanitization: Absent. There are no instructions to sanitize or validate the content retrieved from job history before processing.
- [COMMAND_EXECUTION]: The skill documentation includes a
curlexample for performing aPUTrequest to the Crontap REST API. While the command is intended for configuration, it demonstrates network communication and the use of environment variables ($CRONTAP_CLIENT_ID,$CRONTAP_API_KEY) for authentication. The targeted domainapi.crontap.comis a recognized vendor resource for this skill.
Audit Metadata