auvik-lifecycle
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for administrative auditing and lifecycle planning within Auvik environments. It correctly identifies the scope as read-only, preventing accidental or unauthorized modifications to lifecycle records.
- [CREDENTIALS_UNSAFE]: The skill does not contain hardcoded credentials. It properly instructs users to manage sensitive Auvik API keys and usernames through environment variables (AUVIK_USERNAME, AUVIK_API_KEY).
- [INDIRECT_PROMPT_INJECTION]: The skill has an ingestion surface for untrusted data in
auvik_list_configurations, which retrieves full device configuration bodies from network devices. - Ingestion points:
auvik_list_configurations(SKILL.md). - Boundary markers: None explicitly defined for the configuration text content.
- Capability inventory: No file-write, network exfiltration, or arbitrary command execution capabilities are exposed beyond the read-only API calls.
- Sanitization: Not specified, but the risk is assessed as safe given the intended auditing context and read-only constraints.
Audit Metadata