procore-enterprise-rbac
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides code patterns to fetch company and project data from Procore's official REST API endpoints (
api.procore.com) and authentication services (login.procore.com). - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill facilitates the ingestion of data from the Procore API via network requests defined in
SKILL.md. - Boundary markers: The provided implementation pattern does not include specific boundary markers or instructions to ignore potential instructions embedded in the API response data.
- Capability inventory: The skill uses the
requestslibrary for network operations. - Sanitization: The example code does not demonstrate explicit sanitization or validation of the data returned from the Procore API before it is processed or printed.
Audit Metadata