zapier-status
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or security risks were detected. The skill's operations are limited to inspecting tool metadata and local configuration files to provide health and audit reports for Zapier integrations.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data surfaces including tool inventories, error messages, and local MCP configuration files. While this creates a theoretical surface for indirect prompt injection, the risk is minimal as the skill performs no high-privilege operations with the data.
- Ingestion points: Tool inventory lists, system error messages, and client-specific configuration files (e.g.,
claude_desktop_config.json). - Boundary markers: None explicitly defined in the instructions.
- Capability inventory: Tool status reporting, information grouping, and providing direct links to official Zapier management pages.
- Sanitization: None mentioned, though instructions focus on summarizing rather than executing based on untrusted content.
Audit Metadata