hap-cli-data-query
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill enables the agent to ingest business data from HAP worksheets via the
record listandrecord pivotcommands, which introduces a potential surface for indirect prompt injection if the worksheet content is maliciously crafted. - Ingestion points: Commands such as
hap worksheet record listandhap worksheet record pivotas described inSKILL.mdare used to pull external data into the agent's context. - Boundary markers: The skill does not provide instructions for using delimiters or 'ignore' prefixes to protect against instructions embedded in the worksheet data.
- Capability inventory: The documentation identifies both read operations (
record list) and write operations (record update) available through the HAP CLI toolset. - Sanitization: The skill does not include steps for sanitizing, validating, or escaping the data retrieved from HAP worksheets before it is processed by the agent.
Audit Metadata