ramp-performance-tuning
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of data from the external Ramp API, creating a surface where instructions embedded in the API response could influence agent behavior.\n
- Ingestion points: JSON data returned from the
/cardsand/tokenendpoints of the Ramp API, which is then processed by the agent as shown inSKILL.md.\n - Boundary markers: The implementation patterns lack specific boundary markers or delimiters to separate ingested API data from the agent's instruction stream.\n
- Capability inventory: The agent context includes capabilities for file system access (
Read,Write,Edit) and shell execution (Bash), which could be leveraged if an injection occurs.\n - Sanitization: The provided code snippets do not include sanitization or strict schema validation for the external data before it is integrated into the agent context.
Audit Metadata