org-chart
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Handling of External Directory Data: The skill ingests profile information, names, and titles via the directory tool. This data is then used to construct subsequent queries for manager chains and direct reports. While this is necessary for functionality, there is no explicit sanitization shown for the interpolated values.
- Recursive Data Processing: The management chain is built by recursively querying for managers based on the names returned from previous steps. Processing untrusted data in a recursive loop is a pattern to note for robust implementation.
Audit Metadata