sdworx-webservice
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns were detected in this skill. The instructions and code examples provide legitimate integration patterns for the SD Worx service via the Apideck platform.
- [EXTERNAL_DOWNLOADS]: The skill contains
curlcommands and links referencingunify.apideck.com,specs.apideck.com, anddevelopers.apideck.com. These are official vendor resources used for API coverage checks and the Proxy API escape hatch, representing standard functional requirements for the integration. - [CREDENTIALS_UNSAFE]: The skill correctly instructs the use of environment variables (e.g.,
process.env.APIDECK_API_KEY) and placeholders in examples, avoiding the exposure of hardcoded secrets. - [INDIRECT_PROMPT_INJECTION]: While the skill defines a surface for processing HRIS data (employees, payroll, etc.), it does not include instructions that would make the agent vulnerable to interpreting data as commands. The implementation follows a standard schema-driven approach.
Audit Metadata