gtm-workflow
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local commands using child_process utilities to manage its environment, project state, and workflow deployments.
- It invokes the
vercel,git, andghCLIs to handle project configuration, repository operations, and Vercel deployments as part of its core automation logic. - It executes the
claudeandcodexCLIs to run agent stages using local user subscriptions when configured for local execution. - It manages a dedicated local Postgres database by spawning
initdbandpg_ctlbinaries bundled in theembedded-postgrespackage. - [EXTERNAL_DOWNLOADS]: The skill interacts with external services to perform data enrichment and content retrieval.
- It communicates with the
api.monid.aiandapi.blitz-api.aiendpoints to fetch enriched person and company data. - It uses a custom fetching utility to retrieve readable text from public web addresses provided as input to workflows.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which constitutes an indirect prompt injection surface.
- Ingestion points: External data enters the agent context through user-uploaded CSV files and inbound webhooks for workflow triggers.
- Boundary markers: The skill uses standard AI SDK messaging structures and tool-calling protocols to separate instructions from data.
- Capability inventory: Workflows have the capability to perform network operations, write to database tables, and spawn local subprocesses.
- Sanitization: The skill implements sanitization routines to remove NUL characters from database inputs and uses an SSRF-resistant fetcher that validates hostnames against private and internal IP ranges before execution.
Audit Metadata