migrating-from-customer-io
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the transfer of data from an external service (Customer.io) to PostHog, creating an attack surface where malicious content in the source data could attempt to influence the agent's behavior.\n
- Ingestion points: External data enters the context via
cio_read_api(or thecioCLI), which retrieves campaigns, templates, and layouts from the Customer.io environment.\n - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' markers when processing the content of Customer.io templates.\n
- Capability inventory: The agent has the ability to write to the PostHog platform using
workflows-import-customerioand manage project configurations viaproject-getandswitch-project.\n - Sanitization: The skill instructs the agent to pass data 'unchanged' to PostHog. However, it mitigates risk by ensuring imported workflows are 'drafts' and by prohibiting the migration of sensitive customer profiles or event data.
Audit Metadata