jobs
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Instructs the agent to execute shell-based
curlcommands to interact with API endpoints for job status updates.\n- [DATA_EXFILTRATION]: Performs network requests to an external service specified by theLAYERPROOF_BASE_URLenvironment variable. While this is a functional requirement, it involves sending an API key and interacting with a remote domain.\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection via theoutputfield in the API response, which the agent is instructed to summarize.\n - Ingestion points: The
outputfield of the JSON response from the/api/v2/jobs/{activityId}endpoint.\n - Boundary markers: Not specified; the agent lacks instructions to treat external API data as potentially untrusted or to use delimiters.\n
- Capability inventory: The agent can execute
curlcommands and read sensitive environment variables likeLAYERPROOF_API_KEY.\n - Sanitization: No sanitization or validation logic is defined to check the content of the
outputfield before it is processed and summarized by the agent.
Audit Metadata