nooks-call-timing
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from Nooks and HubSpot contact records (e.g., zip codes, cities, area codes) to resolve time zones. This represents a standard data processing surface for sales productivity tools. The risk is minimized as the data is used for mapping to time-zone offsets rather than being executed as instructions.
- [DATA_EXPOSURE]: The skill processes prospect PII (phone numbers and locations) and team member identifiers (HubSpot and Nooks IDs). This access is explicitly required for the skill's primary function of call timing and team-based routing.
- [COMMAND_EXECUTION]: The skill uses designated Model Context Protocol (MCP) tools within the 'Epiphan Ai' namespace to interact with CRM platforms. All operations against these external systems are defined as read-only.
- [SAFE]: File system activity is restricted to reading and writing local configuration and output files (JSON and HTML) within the agent's 'outputs/' directory. This follows standard practices for maintaining local state without system-level persistence.
Audit Metadata