asana-automation
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill facilitates the ingestion of data from external Asana tasks and projects, which represents a surface for indirect prompt injection. Malicious instructions embedded in Asana task names or notes could influence agent behavior during automation workflows.
- Ingestion points: External data is retrieved via tools such as ASANA_GET_A_TASK, ASANA_SEARCH_TASKS_IN_WORKSPACE, and ASANA_GET_TASKS_FROM_A_PROJECT in SKILL.md.
- Boundary markers: The instructions do not define delimiters or specific instructions for the agent to ignore potentially malicious content within retrieved data.
- Capability inventory: The skill includes tools to create or modify Asana resources, including ASANA_CREATE_A_TASK and ASANA_CREATE_A_PROJECT.
- Sanitization: No sanitization or validation logic is specified for data fetched from the Asana API before it is processed by the agent.
Audit Metadata