ceridian-dayforce
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion and processing of external HRIS data from Ceridian Dayforce, which creates a potential surface for indirect prompt injection.
- Ingestion points: Data is ingested through the
apideck.hris.employees.listmethod and the Apideck Proxy API as described inSKILL.md. - Boundary markers: The instructions do not provide explicit boundary markers or delimiters to isolate data from Ceridian Dayforce from the agent's internal instructions.
- Capability inventory: The skill allows the agent to read and sync employees, departments, payrolls, and time-off records, and to perform network requests to Apideck's Unify API (
unify.apideck.com). - Sanitization: There is no evidence of sanitization, filtering, or validation of the external content before it is processed by the agent.
Audit Metadata