fact-sheet-search
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from a LeanIX workspace, which constitutes an untrusted external ingestion surface. Ingestion points include the
mcp__leanix__filter_inventoryandmcp__leanix__search_inventorytools. The skill instructs the agent to perform structural verification of data candidates and prioritize structured ID lookups over semantic search to mitigate risks. It utilizesmcp__leanix__execute_codefor processing this data. - [DYNAMIC_EXECUTION]: The skill uses
mcp__leanix__execute_codeto perform data analysis tasks that require logic beyond simple queries. Reference files contain JavaScript templates for the agent to adapt and run in the code sandbox for tasks such as calculating completion percentages, ranking results, and traversing complex relations. - [COMMAND_EXECUTION]: The skill leverages the
mcp__leanix__execute_codetool as a primary mechanism for data orchestration and multi-step inventory workflows.
Audit Metadata