freshdesk-automation
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill facilitates the processing of untrusted data from Freshdesk, including ticket descriptions, replies, notes, and contact information. This creates an indirect prompt injection surface where malicious instructions embedded in support tickets could potentially influence the agent's behavior during automated workflows.
- Ingestion points: External data enters the agent context via
FRESHDESK_VIEW_TICKET,FRESHDESK_LIST_ALL_TICKET_CONVERSATIONS, and contact/company search tools. - Boundary markers: The instructions do not define specific delimiters or warnings to ignore instructions embedded within the Freshdesk data.
- Capability inventory: The skill provides capabilities to write back to the platform via
FRESHDESK_REPLY_TO_TICKET,FRESHDESK_UPDATE_TICKET, andFRESHDESK_CREATE_TICKET. - Sanitization: No explicit sanitization or validation logic is defined in the instructions for the external content.
Audit Metadata