pipefy-reports

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill describes standard operations for managing reports and exports on the Pipefy platform. All described behaviors, including CRUD operations and asynchronous exports, align with the vendor's intended functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from external reports. While any external data ingestion carries a theoretical risk of indirect prompt injection, the skill uses structured JSON responses and standard API workflows for report management.
  • Ingestion points: Data enters through get_pipe_report, get_pipe_reports, get_organization_report, and get_organization_reports (SKILL.md).
  • Boundary markers: None explicitly mentioned in the instructions.
  • Capability inventory: The skill allows creating, updating, deleting, and exporting reports via create_pipe_report, update_pipe_report, delete_pipe_report, and export_pipe_report (SKILL.md).
  • Sanitization: No specific sanitization or validation of the report content is described in the markdown instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 02:28 PM