recoup-internal-consulting-client-reconstruct
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a vendor-specific command
recoup-internal-consulting-integrations-syncto synchronize deal data within the workspace. - [INDIRECT_PROMPT_INJECTION]: The skill processes meeting summaries and historical data from the Granola integration, which represents a potential surface for indirect prompt injection from untrusted external content.
- Ingestion points: Meeting summaries located in
integrations/granola/<workspace>/clients/andprospects/(SKILL.md). - Boundary markers: The instructions explicitly mandate that the agent "treat [Granola bodies] as leads to verify, not gospel" and include an "Open items to confirm" section for unverified facts (SKILL.md).
- Capability inventory: File system write access to
clients/andpipeline/directories, modification ofpipeline/_board.md, and execution of therecoup-internal-consulting-integrations-synccommand (SKILL.md). - Sanitization: No automated sanitization or filtering of the ingested historical data is defined in the workflow.
Audit Metadata