intakra-workspace-setup
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates a vulnerability surface for indirect prompt injection. * Ingestion points: The agent is instructed to read external company data and suggestions via the list_accounts and list_suggestions tools in SKILL.md. * Boundary markers: There are no explicit delimiters or boundary markers specified in the prompt instructions to isolate untrusted external data. * Capability inventory: The agent has the capability to perform write operations to the workspace offering and account domains via the set_offering and add_accounts tools. * Sanitization: The instructions do not describe any sanitization or validation protocols for the external data ingested from suggestions.
Audit Metadata