customerio-primary-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill correctly follows security best practices by referencing environment variables (
CUSTOMERIO_SITE_ID,CUSTOMERIO_TRACK_API_KEY) for authentication rather than hardcoding sensitive credentials. - [INDIRECT_PROMPT_INJECTION]: The skill handles user-supplied data (email, names, event metadata) to sync with external SaaS infrastructure.
- Ingestion points: User profile attributes and event data are ingested via the
MessagingServiceandCustomerIOServiceclasses inservices/customerio-messaging.tsandservices/customerio-service.ts. - Boundary markers: Not applicable to this code-centric implementation guide.
- Capability inventory: The skill uses the official
customerio-nodelibrary to perform network operations (identifying users and tracking events). - Sanitization: Standard data structures are used, and instructions assume the developer will handle validation within their application logic.
Audit Metadata