nooks-segment-sync
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: Data is ingested from Google Sheet (fileId
17seA1cgJ9nfsrmytOd4ca9r-BORU6OFJnZzAf-tT_Rw) specifically the 'Name & Link' and 'Notes' columns, and from HubSpot contact records viahubspot_list_membersandhubspot_get_contact. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are used when processing the sheet content or contact data.
- Capability inventory: The skill possesses significant write capabilities, including
hubspot_update_contact,hubspot_update_contact_owner,hubspot_create_contact_note,hubspot_create_contact_task,syncProspects(Nooks), andcreateSequenceState(Nooks). - Sanitization: No sanitization or validation of the ingested strings is mentioned before they are used in tool parameters or displayed to the user.
Audit Metadata