suppress-hard-bounced
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses the uv package manager to install standard dependencies including requests and python-dotenv from official registries.
- [COMMAND_EXECUTION]: The skill executes local Python scripts to perform HubSpot API searches and audit log generation.
- [INDIRECT_PROMPT_INJECTION]: The skill processes contact records retrieved from the HubSpot CRM. 1. Ingestion points: HubSpot Search API results in scripts/before.py and scripts/after.py. 2. Boundary markers: Not present; the script directly iterates over and processes retrieved JSON properties. 3. Capability inventory: Performs authenticated HTTP requests to HubSpot and writes local CSV audit files. 4. Sanitization: Basic numeric casting for bounce counts is performed, but string data from the CRM is logged without sanitization.
Audit Metadata