data-enrichment
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources such as LinkedIn, Apollo, and Strale via the
sandbase_call_toolcapability. This creates an ingestion point for untrusted content that could contain instructions designed to influence the agent's behavior. - Ingestion points: External data retrieved from Apollo, Strale, LinkedIn, and Akta as described in
SKILL.mdandreferences/sandbase-api-map.md. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded content within the tool outputs.
- Capability inventory: The agent uses
sandbase_describe_toolandsandbase_call_toolto perform research and data synthesis. - Sanitization: No explicit sanitization, escaping, or filtering of the external API responses is mentioned in the provided instructions.
Audit Metadata