bamboohr-ci-integration
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data including repository files and OpenAPI specifications which could serve as a vector for indirect prompt injection. Ingestion points: Repository inspection via Read, Glob, and Grep tools, and OpenAPI definitions referenced in references/official-docs.md. Boundary markers: The skill does not define specific delimiters for separating untrusted file content from instructions. Capability inventory: Access to Write and Edit tools for repository modification. Sanitization: Includes instructions for PII redaction and synthetic data usage.
- [SAFE]: References to external repositories and documentation target the official BambooHR GitHub organization, a well-known service provider.
Audit Metadata