metronome-create-customer
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill performs HTTP GET and POST requests to the official Metronome API endpoint (
api.metronome.com/v1). These operations are necessary for duplicate checking and customer record creation as per the skill's primary function. - [DATA_EXPOSURE]: Transmits customer-specific metadata, including legal entity names, Salesforce account IDs, and Slack channel names, to the Metronome platform. This data transmission is consistent with the skill's stated purpose and targets an official vendor domain.
- [CREDENTIALS_UNSAFE]: Utilizes the environment variable
$METRONOME_API_TOKENfor authentication. This follows security best practices by avoiding hardcoded secrets and relying on environment-level secret management. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the
GET /v1/customersendpoint to check for duplicates. - Ingestion points: Customer list returned by the Metronome API in Step 2.
- Boundary markers: None explicitly defined for matching logic.
- Capability inventory: Performs a state-changing API call (POST) in Step 4.
- Sanitization: No explicit sanitization of API response data is mentioned.
- Context: The risk is minimal as the ingested data is sourced from the user's own authorized Metronome environment and used only for name-matching comparisons.
Audit Metadata