integrate-agentkit
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of untrusted data from external sources, specifically email content via the Gmail API.
- Ingestion points: Content is retrieved in
SKILL.md(Step 6),references/node.md(Step 6), andreferences/frameworks.md(LangChain/ADK samples). - Boundary markers: The instructions do not define delimiters or specific system instructions to prevent the agent from following commands embedded within the fetched emails.
- Capability inventory: The skill demonstrates network access (
requests,fetch) and the ability to pass data to LLM agents (langchain,google-adk). - Sanitization: There is no evidence of sanitization or filtering of the retrieved email snippets before they are processed or summarized.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing several dependencies for its operation.
- Python packages:
scalekit-sdk-python(vendor SDK),python-dotenv,requests,langchain,langchain-openai,langchain-core, andgoogle-adk. - Node.js packages:
@scalekit-sdk/node(vendor SDK) anddotenv. - [COMMAND_EXECUTION]: The instructions provide shell commands for installing the necessary packages using
pipandnpmto set up the integration environment.
Audit Metadata