communication-history
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources that could influence the agent's behavior.
- Ingestion points: Data is ingested from HubSpot CRM records via
hubspot activities listandhubspot activities calls transcript getinSKILL.md. - Boundary markers: There are no explicit boundary markers or instructions to the agent to ignore embedded commands within the CRM data.
- Capability inventory: The skill uses
hubspotCLI commands to read and write CRM data and uses shell piping to manipulate data withjq. - Sanitization: The skill does not perform sanitization or filtering of the content retrieved from transcripts or activity bodies before presenting it to the agent context.
- [COMMAND_EXECUTION]: The skill uses standard shell utilities and a vendor-specific CLI tool to perform its tasks.
- Evidence: Uses
hubspotCLI,jq,date, andechoin several bash pipelines withinSKILL.mdto automate CRM data retrieval and formatting.
Audit Metadata