salesloft-core-workflow-a
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted prospect data which could potentially contain malicious instructions intended to influence the agent's behavior.
- Ingestion points: Prospect names and emails are processed in the
bulkEnrollandfindOrCreatePersonfunctions inSKILL.md, typically sourced from external CSV files. - Boundary markers: The instructions do not define delimiters or provide specific prompts to the agent to ignore instructions embedded within the prospect data.
- Capability inventory: The skill uses
axiosto perform authenticated network requests (GET and POST) to the SalesLoft REST API. - Sanitization: No input validation or sanitization is performed on the prospect data before it is incorporated into the API workflow.
Audit Metadata