apollo-hello-world
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill includes code to fetch data from the Apollo.io API and print it to the console, which represents a typical external data ingestion surface.
- Ingestion points: External data is ingested from the
https://api.apollo.io/api/v1/search and enrichment endpoints in both the TypeScript and Python examples. - Boundary markers: The example code does not include specific delimiting or instructions to the LLM to ignore potentially malicious content within the API responses.
- Capability inventory: The ingested data is only used for console output (
console.log,print) and is not passed to dangerous sinks such as shell execution, file writing, or network exfiltration. - Sanitization: The skill outputs raw response data without sanitization or filtering, which is acceptable for a minimal demonstration of API capabilities.
Audit Metadata