customer-support
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains no executable code or scripts. All instructions are text-based and describe standard customer support roles and responsibilities.
- [PROMPT_INJECTION]: (Indirect Prompt Injection Surface) The agent is designed to handle untrusted input from customers via chat and ticketing systems, which represents a potential attack surface for indirect prompt injection.
- Ingestion points: Customer interactions across email, chat, social media, and WhatsApp (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore commands within user-provided text.
- Capability inventory: The skill describes the capability to interact with external APIs, CRM systems (Salesforce, HubSpot), and help desk software (Zendesk, Intercom).
- Sanitization: No sanitization or validation procedures for incoming customer messages are specified.
Audit Metadata