platform-api

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides a shell script (scripts/download-schema.sh) to download the Genesys Cloud Platform API schema (Swagger 2.0) from official Genesys domains (e.g., api.mypurecloud.com). This is a standard operation for local API documentation exploration.
  • [COMMAND_EXECUTION]: The skill relies on the bash tool and jq to search and extract data from the local schema.json file. These commands are necessary for the skill's primary purpose of querying a large JSON schema.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from an external, potentially untrusted source (the downloaded schema.json).
  • Ingestion points: The schema.json file is read by jq and its contents are processed by the agent to generate responses.
  • Boundary markers: Absent. The instructions do not include explicit delimiters or warnings to ignore instructions that might be embedded within the API schema's text fields.
  • Capability inventory: The skill uses bash and jq to read and parse the schema file.
  • Sanitization: The workflow uses jq to extract specific keys (like operationId, summary, and description), which provides structural filtering. However, the text content within those fields is directly used in the final response to the user.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:54 AM