plan-campaign
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto perform GraphQL queries and mutations. - Evidence: Shell commands in
SKILL.mdinteract with the author's CRM athttps://crm.psquared.dev/graphqlusing a token from the.envfile. - [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection via data retrieved from the CRM.
- Ingestion points: Opportunity and company data fetched from the CRM API in Step 1.
- Boundary markers: Absent; no specific delimiters or instructions are used to separate the external data from the agent's logic.
- Capability inventory: The skill has the capability to write to the CRM (create campaigns and update opportunities) and perform network requests via
curl. - Sanitization: The skill does not explicitly validate or sanitize the data retrieved from the CRM before using it as input for subsequent API mutations in Steps 3 and 4.
Audit Metadata