employmenthero
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external HRIS records (Employment Hero), which represents a potential attack surface for instructions embedded in third-party data.
- Ingestion points: Data enters the agent's context through the
apideck.hris.employees.listmethod and the Proxy API endpoints described inSKILL.md. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings for the data retrieved from the API.
- Capability inventory: The skill leverages language-specific SDKs (like
apideck-node) which provide a broad range of unified API interactions across the HRIS domain. - Sanitization: There is no evidence of sanitization, filtering, or validation of the external content before it is processed by the agent.
Audit Metadata