setting-up-a-custom-rest-source
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from arbitrary, user-defined external REST APIs, which serves as a potential surface for indirect prompt injection if an API returns malicious instructions.\n
- Ingestion points: The
external-data-sources-preview-resourcetool fetches live row data from external endpoints as described in Step 4 ofSKILL.md.\n - Boundary markers: The skill does not provide specific delimiters or instructions for the agent to treat external API data as untrusted or to ignore embedded commands.\n
- Capability inventory: The skill leverages tools to read external data (
preview-resource), validate configuration schemas (db-schema), and establish persistent data synchronizations (data-warehouse-source-setup).\n - Sanitization: The documentation does not specify any sanitization or filtering procedures for the content retrieved from the external API responses before they are presented to the agent.
Audit Metadata