intercom-install-auth
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
intercom-clientpackage, which is the official Node.js SDK for Intercom, from the public npm registry during initialization. - [INDIRECT_PROMPT_INJECTION]: The skill fetches and displays data from the Intercom API (listing administrator names and emails), which serves as a potential vector for indirect prompt injection if an attacker controls that workspace data.
- Ingestion points: Data enters the agent's context through the
client.admins.list()call demonstrated inreferences/examples.md. - Boundary markers: The instructions do not define clear boundaries or 'ignore' commands to isolate the external API output from the agent's instructions.
- Capability inventory: The skill environment includes file system write access via
Writeand command execution throughBashfor package management. - Sanitization: The skill logs the retrieved admin names and emails to the console without filtering or sanitizing the content for potential injection strings.
Audit Metadata