lucca-hr
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and integration examples for the Lucca connector. All code samples utilize best practices for secret management, such as using environment variables (
APIDECK_API_KEY) and managed authentication via Apideck Vault. - [EXTERNAL_DOWNLOADS]: The skill references the
@apideck/unifyNode.js package and official API specifications from Apideck and Lucca. These references target the vendor's own official infrastructure and documentation, which is consistent with the skill's primary purpose. - [INDIRECT_PROMPT_INJECTION]: The skill defines methods to ingest data from Lucca (employees, time-off records). While this represents a data ingestion surface, the skill does not provide any functionality to execute retrieved data or perform unsafe shell operations, minimizing the risk of indirect injection attacks.
Audit Metadata