teambition-statistics
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves enterprise task data from Teambition APIs to perform statistical analysis. While this introduces a surface for indirect prompt injection if task content contains malicious instructions, the skill's functionality is limited to data aggregation and presentation, significantly mitigating the risk.
- Ingestion points: Data returned by the
OrganizationTaskStatisticsandOrganizationColumnMaptools inreferences/api-spec.md. - Boundary markers: None specified in the instructions for handling the retrieved data.
- Capability inventory: The skill uses MCP tools for network requests to Teambition endpoints but does not have filesystem write or arbitrary command execution capabilities based on data content.
- Sanitization: No explicit sanitization of the retrieved task content is mentioned before presenting the formatted results to the user.
Audit Metadata