forge-connector
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/scaffold_connector.pyscript executes theforgeCLI andnpmcommands usingsubprocess.runto initialize projects and install dependencies without using a shell environment. - [EXTERNAL_DOWNLOADS]: The skill automates the installation of the official
@forge/teamwork-graphSDK from the NPM registry and references official Atlassian developer documentation. - [INDIRECT_PROMPT_INJECTION]: The skill scaffolds a data ingestion pipeline that fetches external content for indexing in Rovo Search, creating a potential indirect prompt injection surface.
- Ingestion points: Data is retrieved from external service APIs via the
fetchExternalDatafunction in the generatedsrc/index.tsfile. - Boundary markers: The generated boilerplate code does not include explicit boundary delimiters or instructions to ignore instructions within the ingested content.
- Capability inventory: The resulting connector possesses capabilities for network requests (
fetch), Teamwork Graph ingestion (setObjects), and persistent storage (kvs). - Sanitization: The scaffolding provides a template for field mapping but does not include automated content sanitization or validation routines for the ingested data.
Audit Metadata