crm-enrichment
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external CRM systems, which serves as a surface for untrusted data. * Ingestion points: CRM data is extracted via the
crm_accountsandcrm_contactsmodels defined in the infra/models folder. * Boundary markers: The skill implements strictzodschema validation for all workflow inputs and outputs inaccount-enrichment.tsandcontact-linkedin-enrichment.ts. * Capability inventory: The skill utilizescrm.updateRecordsfor data writing and the LinkedIn connector for external API calls. * Sanitization: Input data is validated against expected types and structures before processing. - [COMMAND_EXECUTION]: The documentation and skill instructions provide standard setup, installation, and verification commands using the
cargo-aiCLI and Node.js to ensure pipeline configuration integrity.
Audit Metadata