loket-nl

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a standard integration guide that uses official vendor resources and follows security best practices for authentication and credential management.
  • [EXTERNAL_DOWNLOADS]: The skill references the official @apideck/unify Node.js package, which is a trusted resource provided by the vendor (Apideck).
  • [INDIRECT_PROMPT_INJECTION]: The skill handles sensitive HRIS data from Loket.nl, which constitutes a potential attack surface if the data contains malicious instructions processed by an agent without sanitization. 1. Ingestion points: Employee, department, payroll, and time-off data retrieved via the Apideck HRIS API in SKILL.md. 2. Boundary markers: No specific delimiters or safety instructions for processing retrieved data are provided. 3. Capability inventory: The skill enables listing and syncing sensitive organizational data (employees, payroll, etc.). 4. Sanitization: No sanitization or validation steps are described for the external data content.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 11:55 AM