platform-api
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides a shell script (
scripts/download-schema.sh) to download the Genesys Cloud Platform API schema (Swagger 2.0) from official Genesys domains (e.g.,api.mypurecloud.com). This is a standard operation for local API documentation exploration. - [COMMAND_EXECUTION]: The skill relies on the
bashtool andjqto search and extract data from the localschema.jsonfile. These commands are necessary for the skill's primary purpose of querying a large JSON schema. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from an external, potentially untrusted source (the downloaded
schema.json). - Ingestion points: The
schema.jsonfile is read byjqand its contents are processed by the agent to generate responses. - Boundary markers: Absent. The instructions do not include explicit delimiters or warnings to ignore instructions that might be embedded within the API schema's text fields.
- Capability inventory: The skill uses
bashandjqto read and parse the schema file. - Sanitization: The workflow uses
jqto extract specific keys (likeoperationId,summary, anddescription), which provides structural filtering. However, the text content within those fields is directly used in the final response to the user.
Audit Metadata