breathehr

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill serves as a legitimate technical guide for integrating Breathe HR via the Apideck HRIS API. Code examples correctly utilize environment variables for sensitive API keys and communicate with official vendor endpoints (unify.apideck.com).
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external HR data (employees, payroll) into the agent's context. While this represents a data ingestion surface, the behavior is intrinsic to the skill's purpose as an API connector and does not include any specific exploitable vulnerabilities or malicious prompts.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 06:32 PM