airtable
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
curlfor API interaction andpython3for processing JSON responses and encoding data. These commands are executed via the agent's terminal tool. - [DYNAMIC_EXECUTION]: The skill uses
python3 -cto execute small, dynamically generated code snippets for URL-encoding search formulas. - [INDIRECT_PROMPT_INJECTION]: The skill fetches data from external Airtable bases, creating a vector for instructions to enter the agent's context.
- Ingestion points: External data is ingested through
curlresponses fromhttps://api.airtable.comcontaining record fields and table schemas. - Boundary markers: The skill does not provide specific delimiters or instructions to treat data retrieved from the API as potentially untrusted.
- Capability inventory: The agent utilizes the
terminaltool to run shell commands likecurlandpython3. - Sanitization: While the skill uses URL-encoding for outbound requests, it lacks sanitization or filtering for data retrieved from record fields before it is processed.
Audit Metadata