attio-ci-integration
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes files from the local repository, creating a surface for potential indirect prompt injection if the files contain malicious instructions.
- Ingestion points: The skill utilizes
Read,Glob, andGreptools to inspect workflows, fixtures, and client code within the repository (SKILL.md). - Boundary markers: No explicit delimiters or instructions are provided to the agent to distinguish between data and potential instructions within the files being read.
- Capability inventory: The skill is granted capabilities to modify the filesystem (
Write,Edit) and perform network operations (WebFetch) (SKILL.md). - Sanitization: There are no defined procedures for sanitizing or validating the contents of the files before they are processed by the agent.
Audit Metadata