Skills
Navigate
skills/apideck-libraries/api-skills/payfit/Gen Agent Trust Hub

payfit

Pass

Audited by Gen Agent Trust Hub on Oct 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security issues detected. The skill follows industry standard practices for API integration, utilizing environment variables for credentials and official vendor-provided SDKs.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external HRIS data (employees, payroll, and time-off records) which acts as an ingestion point for untrusted content from the PayFit API.
  • Ingestion points: apideck.hris.employees.list in SKILL.md.
  • Boundary markers: None specified in the instructions.
  • Capability inventory: Network requests via SDK and curl commands.
  • Sanitization: Not explicitly addressed in the skill body.
  • [EXTERNAL_DOWNLOADS]: Fetches connector configuration and OpenAPI specifications from official Apideck and PayFit developer portals, which are verified vendor resources.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 4, 2026, 11:54 AM