tres-settings-management
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- Explicit User Confirmation: The skill enforces a multi-step approval process for all mutations. It requires the agent to show a summary of changes, explicitly ask for user consent, and confirm the results, which is an excellent security control against accidental or unauthorized changes.
- Risk Awareness: The instructions include a specific list of high-risk settings (e.g.,
costBasisStrategy,disableAutoCommit) and mandate that the agent provide warnings to the user before modifying them. This helps prevent impactful configuration errors. - Dynamic Schema Discovery: By utilizing introspection tools rather than hardcoded fields, the skill ensures it operates within the current capabilities of the API and reduces the risk of errors from outdated instructions.
- Least Privilege and Scope: The skill uses patch semantics for mutations, meaning only the specified fields are updated. It also encourages querying only relevant fields to avoid unnecessary data exposure.
Audit Metadata