adp-workforce-now
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references API specifications and technical documentation from vendor-owned domains and well-known service providers.
- Evidence: References to
https://specs.apideck.com/hris.ymland ADP's official developer documentation. - [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for reading data from external HRIS systems, which represents a standard vulnerability surface for indirect prompt injection.
- Ingestion points: Employee and payroll data retrieved from ADP Workforce Now via Apideck API endpoints (SKILL.md).
- Boundary markers: No specific delimiters or safety instructions for ignoring embedded instructions are provided in the examples.
- Capability inventory: Instructions cover data retrieval using the
@apideck/unifySDK andcurlcommands. - Sanitization: Demonstrative examples do not include explicit input validation or sanitization routines.
Audit Metadata