pipefy-database-tables
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documents various Pipefy CLI commands (e.g.,
pipefy table list,pipefy record create) for interacting with the Pipefy API. These are standard administrative commands for the vendor's platform and do not involve arbitrary shell injection or dangerous system-level access. - [EXTERNAL_DOWNLOADS]: The
upload_attachment_to_table_recordtool mentions support for afile_urlparameter. The documentation explicitly states this is 'SSRF-guarded', indicating a security control is in place to prevent Server-Side Request Forgery when fetching remote files for upload to the platform. - [DATA_EXPOSURE]: The skill involves reading and writing data within Pipefy Database Tables. Access to this data is managed through the user's Pipefy authentication and the MCP/CLI configuration; the skill itself does not hardcode credentials or exfiltrate data to unauthorized third parties.
- [PROMPT_INJECTION]: No evidence of prompt injection patterns or attempts to override AI safety guardrails was found. The instructions focus on structured data operations.
- [PERSISTENCE_MECHANISMS]: No persistence mechanisms, such as modification of shell profiles or scheduled tasks, were detected. The skill is entirely focused on database table management tasks.
Audit Metadata