recoup-internal-consulting-prospect-resurrection
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes meeting notes from the Granola platform, which are derived from external conversations. This constitutes an ingestion point for untrusted data that could influence the agent's behavior.
- Ingestion points: Prospect meeting summaries stored in the
integrations/granola/<workspace>/prospects/directory. - Boundary markers: The skill does not define specific delimiters or instructional barriers to prevent the agent from following commands that might be embedded within the meeting summaries.
- Capability inventory: The agent has permissions to read meeting data, write files to the
pipeline/directory, and interact with the Attio API to create deal records. - Sanitization: There is no evidence of sanitization or content validation for the meeting data before it is used for ranking or drafting communications.
- [DATA_EXFILTRATION]: The skill transmits information derived from internal prospect records to the external Attio CRM platform.
- Evidence: Step 7 instructions specify the creation of Attio deals using data extracted from the meeting analysis.
- Context: The use of the Attio CRM is an intended primary function of this internal tool authored by recoupable.
Audit Metadata