consult-flow-design
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill handles data ingestion from external Google Drive documents (notes, plans, and business requirements) using secure workflow gates. It mandates a narrative confirmation step (Step 3) where the user must review extracted information before any automated drawing or database updates occur, effectively mitigating indirect prompt injection risks.\n- [SAFE]: Automated communication is restricted to the creation of Gmail drafts rather than direct sending (Hard Rule 5), ensuring the user maintains final control over outbound messages.\n- [SAFE]: All identified external resources, including the installation repository and the CRM platform domain, belong to the verified vendor's infrastructure. The hardcoded Drive folder ID and email address are project configuration constants rather than sensitive credentials.
Audit Metadata