crm-migrate
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool with a restricted set of allowed commands (
mkdir,cp, anddate) to manage directories and create file snapshots during the migration process. - [EXTERNAL_DOWNLOADS]: The skill interacts with external CRM platforms (Airtable and Attio) through dedicated adapter skills to retrieve and write records.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external CRM records and local markdown files which are considered untrusted sources. Malicious content within these records could attempt to influence the agent's behavior during the mapping or confirmation phases.
- Ingestion points: Data parsed from the
crm/directory and records pulled from Airtable and Attio APIs. - Boundary markers: None explicitly defined in the procedure instructions.
- Capability inventory: Uses
Writefor local files and restrictedBashcommands for directory and file operations. - Sanitization: The skill instructions do not specify sanitization or escaping of the ingested CRM content before processing.
Audit Metadata