disqualification-handling
Warn
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: MEDIUMDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [DATA_EXFILTRATION]: The skill transmits prospect information, including email addresses and disqualification reasons, to an external API endpoint specified by the
PEPPER_CLOUD_URLenvironment variable. - Evidence: Use of
curl -sf -X POST "$PEPPER_CLOUD_URL/api/state/append"to send lead data to a remote server. - [COMMAND_EXECUTION]: The skill defines and executes several shell functions (
state_read,state_write,state_append) that utilizecurlandpython3to perform network requests and process JSON data. - Evidence: Workflow Step 5 defines functions that execute arbitrary shell commands to interact with the Pepper Cloud API.
- [EXTERNAL_DOWNLOADS]: The skill performs network operations to a dynamic remote endpoint to synchronize lead status and state.
- Evidence: Routine use of
curlto fetch and push data to$PEPPER_CLOUD_URL.
Audit Metadata