consult-shadowing-scheduler

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides an installation command utilizing npx to fetch tooling from the author's official repository at github.com/peter-tu-zynkr/zynkr-skill-builder.
  • [COMMAND_EXECUTION]: Utilizes the Supabase MCP to execute SQL queries that resolve deal and contact information from a database, integrating user-provided company names or identifiers.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from CRM deal notes to resolve project folder paths, which is an untrusted data surface.
  • Ingestion points: Deal notes and metadata are retrieved via mcp__zynkr__get_deal and mcp__supabase__execute_sql as described in SKILL.md.
  • Boundary markers: No explicit delimiters or markers are defined to isolate the content of deal notes from instructions.
  • Capability inventory: The skill can create calendar events, Drive subfolders, and Gmail drafts using Google Workspace tools.
  • Sanitization: The workflow relies on a manual confirmation gate where the user must approve specific time slots and attendee options before any write operations occur.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 07:30 PM
Security Audit — agent-trust-hub — consult-shadowing-scheduler