visma-netvisor
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for ingesting external data (invoices, bills, journal entries) from Visma Netvisor, creating a potential surface for indirect injection if that data contains malicious instructions.
- Ingestion points: Data retrieved via
apideck.accounting.invoices.listand related methods as described inSKILL.md. - Boundary markers: Not explicitly defined in the instructional text; the agent relies on its own parsing logic.
- Capability inventory: The skill documents the use of the Apideck SDK to perform network requests to
unify.apideck.com. - Sanitization: No specific sanitization logic is provided in the instructions; it is assumed the unified API handles data normalization.
- [SAFE]: Credential management in examples correctly utilizes
process.envfor sensitive keys, preventing hardcoded secrets. - [SAFE]: All external URL references target official domains belonging to the author (Apideck) or the integrated service (Visma Netvisor).
Audit Metadata