breathehr
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a legitimate technical guide for integrating Breathe HR via the Apideck HRIS API. Code examples correctly utilize environment variables for sensitive API keys and communicate with official vendor endpoints (unify.apideck.com).
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external HR data (employees, payroll) into the agent's context. While this represents a data ingestion surface, the behavior is intrinsic to the skill's purpose as an API connector and does not include any specific exploitable vulnerabilities or malicious prompts.
Audit Metadata