teamtailor
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches configuration and OpenAPI specifications from the vendor's official domains (unify.apideck.com, specs.apideck.com).
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources (Teamtailor) which constitutes a potential attack surface for indirect injection.
- Ingestion points: Job listings and applicant data retrieved via the Apideck ATS API in SKILL.md.
- Boundary markers: None explicitly defined to separate untrusted data from agent instructions.
- Capability inventory: The skill enables read and write operations via network API calls to manage recruitment data.
- Sanitization: No explicit sanitization or filtering logic is specified for the ingested data.
Audit Metadata