apollo-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECREDENTIALS_UNSAFEDYNAMIC_CONTEXT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The diagnostic scripts include logic to print a partial prefix (first 4 to 8 characters) of the APOLLO_API_KEY environment variable to the console for verification purposes, resulting in partial credential exposure.\n- [DYNAMIC_CONTEXT_INJECTION]: The skill uses dynamic context commands (!node --version, !python3 --version, !uname -a) in the markdown file to automatically display environment information when the file is accessed.\n- [INDIRECT_PROMPT_INJECTION]: The skill contains an attack surface for indirect prompt injection via external data ingestion.\n
- Ingestion points: Data is fetched from multiple Apollo.io API endpoints such as /auth/health, /people/search, and /organizations/enrich (SKILL.md, implementation-guide.md).\n
- Boundary markers: There are no explicit markers or instructions used to separate the external API data from the agent's reasoning context.\n
- Capability inventory: The skill possesses file writing capabilities (fs.writeFileSync) and network access via the Bash(curl:*) tool.\n
- Sanitization: A sanitizeResponse function is present in references/implementation-guide.md which redacts contact counts but does not filter for potential malicious instructions embedded in API response strings.
Audit Metadata