consult-shadowing-scheduler
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides an installation command utilizing
npxto fetch tooling from the author's official repository atgithub.com/peter-tu-zynkr/zynkr-skill-builder. - [COMMAND_EXECUTION]: Utilizes the Supabase MCP to execute SQL queries that resolve deal and contact information from a database, integrating user-provided company names or identifiers.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from CRM deal notes to resolve project folder paths, which is an untrusted data surface.
- Ingestion points: Deal notes and metadata are retrieved via
mcp__zynkr__get_dealandmcp__supabase__execute_sqlas described inSKILL.md. - Boundary markers: No explicit delimiters or markers are defined to isolate the content of deal notes from instructions.
- Capability inventory: The skill can create calendar events, Drive subfolders, and Gmail drafts using Google Workspace tools.
- Sanitization: The workflow relies on a manual confirmation gate where the user must approve specific time slots and attendee options before any write operations occur.
Audit Metadata