charliehr
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and fetches API specifications from
specs.apideck.comand connector configuration metadata fromunify.apideck.com. These are official vendor resources controlled by Apideck. - [COMMAND_EXECUTION]: The skill documentation includes
curlcommand examples intended for developers to verify connector coverage and utilize the Apideck Proxy API. These commands are utility-focused and utilize user-provided environment variables for authentication. - [INDIRECT_PROMPT_INJECTION]: As a data-processing skill, it ingests employee, payroll, and time-off data from CharlieHR's external API. This creates a potential surface for indirect prompt injection if the data within the HRIS platform were to contain malicious instructions, though this is a standard characteristic of integration tools.
Audit Metadata