jumpcloud
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or persistence mechanisms were detected in the skill instructions or metadata.
- [CREDENTIALS_UNSAFE]: The skill correctly demonstrates using environment variables (
process.env.APIDECK_API_KEY,process.env.APIDECK_APP_ID) and the Apideck Vault for sensitive credential management, avoiding hardcoded secrets. - [EXTERNAL_DOWNLOADS]: The skill references official vendor resources, including the
@apideck/unifypackage and API specifications fromapideck.comandjumpcloud.com, which are recognized as well-known service domains. - [INDIRECT_PROMPT_INJECTION]: As an API connector skill, it involves processing data from external sources (JumpCloud records). While this represents a standard integration surface, no evidence of specific injection vulnerabilities or unsafe interpolation of untrusted data was found.
- [COMMAND_EXECUTION]: Provides standard
curlexamples for interacting with the vendor's API gateway for coverage checks and proxy requests.
Audit Metadata