pipa-get-work
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFEPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill accesses a local file at
~/.pipa/profile.mdto retrieve business context. While intended for personalization, this represents access to the local file system for data retrieval. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, which is a common surface for indirect prompt injection attacks.
- Ingestion points: The skill ingests data from external sources including "notes, links, CRM rows, messages, search results" as described in
references/get-work.md. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands in external data are present in the provided files.
- Capability inventory: The skill has the capability to interact with live applications via
composioand other management skills (pipa-manage,pipa-triggers), providing a pathway for actions based on processed data. - Sanitization: There are no documented sanitization or validation steps for the data ingested from external sources.
Audit Metadata