listingsapi-multi-location-posting
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from API endpoints (e.g., location search results and connected accounts) which represents a potential injection surface. This risk is addressed through mandatory human-in-the-loop verification, requiring the agent to display all campaign details for user approval before any publishing occurs.
- [SAFE]: The skill utilizes vendor-specific domains (listingsapi.com) for its API operations and instructs the agent to store credentials in secure environment variables or secret stores rather than hardcoding them.
Audit Metadata