bamboohr-common-errors
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill triages external error messages and logs, which constitutes an ingestion point for untrusted data.
- Ingestion points: Processes status codes, exceptions, and error summaries from external integration logs (SKILL.md).
- Boundary markers: Lacks specific delimiters but mandates strict redaction of PII and credentials.
- Capability inventory: Restricted to file system inspection and editing tools (Read, Glob, Grep, Write, Edit) without network or shell execution access.
- Sanitization: Instructions require redacting PII and credentials from error text before further processing (SKILL.md).
- [EXTERNAL_DOWNLOADS]: The skill references official BambooHR SDK repositories and documentation.
- The references target official GitHub repositories for BambooHR (github.com/BambooHR/*).
- The documentation identifies the bamboohr-sdk package and includes a defensive recommendation to verify the source before installation.
Audit Metadata