check-outreach-status

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes curl to perform network requests to external API endpoints for retrieving outreach data.
  • [EXTERNAL_DOWNLOADS]: Connects to crm.psquared.dev and notifications.psquared.dev to fetch opportunity and draft status information. These domains are consistent with the infrastructure managed by the skill's author.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it ingests and reports data from external APIs.
  • Ingestion points: Opportunity data from the GraphQL API (Step 1) and draft status from the notification service (Step 3).
  • Boundary markers: The skill does not define specific delimiters for separating external data from its own instructions in the reporting phase.
  • Capability inventory: The skill has the ability to perform network operations via curl and provide structured reports to the agent.
  • Sanitization: No explicit validation or filtering of the API responses is performed before the data is integrated into the final report.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 06:39 AM