officient-io
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill acts as documentation and a configuration guide for the Officient connector within the Apideck HRIS unified API. It provides legitimate code examples and API endpoints for standard business operations as part of the apideck-libraries ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data from the Officient HRIS service (e.g., employee records, payrolls). This represents a potential surface for indirect prompt injection if data retrieved from the service contains instructions that the agent interprets.
- Ingestion points: HRIS unified API endpoints for employees, departments, payrolls, and time-off records (documented in SKILL.md).
- Boundary markers: No specific delimiters or warnings for the agent to ignore embedded instructions in the retrieved data are provided in this skill.
- Capability inventory: The skill allows for network operations via curl and the @apideck/unify SDK to interact with both Apideck and Officient APIs.
- Sanitization: No explicit sanitization or filtering of the retrieved data is mentioned in the provided examples.
Audit Metadata