pipefy-observability
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions direct the agent to use the
pipefyCLI for various read-only observability tasks, such as listing logs and retrieving usage statistics. These commands are consistent with the vendor's provided tools. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection attack surface.
- Ingestion points: Untrusted data enters the agent context via
get_ai_agent_logsandget_automation_jobs_export_csv(SKILL.md). - Boundary markers: The instructions do not include specific delimiters or warnings to the agent to disregard instructions that may be embedded within the ingested logs or CSV content.
- Capability inventory: The agent has state-modifying capabilities, specifically
toggle_ai_agent_status(SKILL.md), which could be targeted by instructions hidden in ingested data. - Sanitization: No sanitization, filtering, or validation steps are defined for the data retrieved from external logs or export jobs.
Audit Metadata