intercom-data-handling
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from Intercom conversations and contacts, which can contain user-generated content, forming a potential surface for indirect prompt injection.
- Ingestion points:
references/implementation.md(Intercom API response data viaclient.contacts.findandclient.conversations.search). - Boundary markers: No specific boundary markers or 'ignore' instructions are used when processing raw conversation text.
- Capability inventory: Performs network requests via
fetch, file system writes usingfs.writeFile, and database interactions with alocalDbobject. - Sanitization: Includes a
redactIntercomDatafunction designed to mask PII fields such as email, name, and SSN before logging data. - [EXTERNAL_DOWNLOADS]: The skill makes requests to external Intercom API endpoints to retrieve user and conversation data.
- Evidence: Network calls to
https://api.intercom.io/export/messages/dataand related endpoints inreferences/implementation.md. - [COMMAND_EXECUTION]: The skill provides examples that involve writing data to the local file system using Node.js file system modules.
- Evidence: Usage of
fs.writeFileinSKILL.mdandreferences/examples.mdto persist data bundles.
Audit Metadata