salesloft-rate-limits
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill focuses on API rate limit governance and reliability using official Salesloft documentation. It encourages following documented server guidance for rate limits rather than attempting to bypass them.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection through the ingestion of external API response headers.
- Ingestion points: The skill instructions in
SKILL.mdrequire the agent to instrument and monitor Salesloft API response headers, specificallyx-ratelimit-endpoint-costandx-ratelimit-remaining-minute. - Boundary markers: No specific boundary markers or instructions to treat headers as untrusted data are provided.
- Capability inventory: The skill possesses
Write,Edit, andWebFetchcapabilities to modify local project files (e.g., limiters, retry loops) and interact with external Salesloft API endpoints. - Sanitization: No explicit sanitization or validation of the header content is specified before it is used to adjust limiter policies.
- Note: This surface is inherent to the skill's primary purpose of API budget management and follows standard industry practices for handling rate limits.
Audit Metadata