sent-profile-provisioning
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists of instructional documentation and configuration for interacting with a specific service's API. No malicious patterns or executable code were detected.
- [DATA_EXPOSURE]: The instructions include explicit security warnings to the agent, such as never requesting or exposing credentials and ensuring that sensitive data like payment details are ephemeral and never logged or persisted.
- [INDIRECT_PROMPT_INJECTION]: While the skill describes processing external data from API responses and webhooks, it provides mitigation strategies, such as treating callback payloads as untrusted input and verifying identifiers against internal records.
- [COMMAND_EXECUTION]: No shell commands, subprocess calls, or script execution patterns were found in the skill content.
- [EXTERNAL_DOWNLOADS]: The skill refers to internal API endpoints and standard REST workflows without triggering external downloads or remote code execution.
Audit Metadata