zapier-sdk
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of official Node.js packages from the
@zapierscope (@zapier/zapier-sdk,@zapier/zapier-sdk-cli,@zapier/zapier-durable) and standard development dependencies (typescript,zod,@types/node) from the npm registry. - [COMMAND_EXECUTION]: Extensive use of the
npx zapier-sdkCLI tool is documented for discovery, authentication, and execution of actions across integrated applications. - [REMOTE_CODE_EXECUTION]: The skill documents the
publish-workflow-versionandrun-durablecommands, which allow users to upload local TypeScript source code to Zapier's cloud infrastructure (code-substrate-runner) for execution as durable workflows. This is a primary feature of the SDK. - [INDIRECT_PROMPT_INJECTION]: The skill interacts with over 9,000 third-party applications via Zapier. Data retrieved from these external sources (e.g., email bodies, CRM records, chat messages) is ingested into the agent's context, presenting a surface for indirect prompt injection.
- Ingestion points: Data returned from
zapier.runAction,zapier.listActions, andzapier.fetchdocumented inSKILL.mdandreferences/workflows.md. - Boundary markers: The documentation encourages the use of Zod (
InputSchema) for structured data validation inreferences/examples.mdandreferences/workflows.md. - Capability inventory: Subprocess execution (
npx), file writes/deployment (publish-workflow-version), and network operations (zapier.fetch) across multiple scripts. - Sanitization: Validation of input shapes via Zod is demonstrated in example code to ensure data integrity.
Audit Metadata