crm-migrate

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool with a restricted set of allowed commands (mkdir, cp, and date) to manage directories and create file snapshots during the migration process.
  • [EXTERNAL_DOWNLOADS]: The skill interacts with external CRM platforms (Airtable and Attio) through dedicated adapter skills to retrieve and write records.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from external CRM records and local markdown files which are considered untrusted sources. Malicious content within these records could attempt to influence the agent's behavior during the mapping or confirmation phases.
  • Ingestion points: Data parsed from the crm/ directory and records pulled from Airtable and Attio APIs.
  • Boundary markers: None explicitly defined in the procedure instructions.
  • Capability inventory: Uses Write for local files and restricted Bash commands for directory and file operations.
  • Sanitization: The skill instructions do not specify sanitization or escaping of the ingested CRM content before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 05:16 AM
Security Audit — agent-trust-hub — crm-migrate