gns3-project-lifecycle
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to manage GNS3 network lab lifecycles using standard API interactions. No malicious behavior, obfuscation, or unauthorized data access patterns were detected.
- [COMMAND_EXECUTION]: The skill executes a local Python script
mcp-servers/gns3-mcp-server/gns3_mcp_server.pyto function as an MCP server. This is the intended and standard method for providing tool capabilities in this framework. - [CREDENTIALS_UNSAFE]: The skill requires
GNS3_USERandGNS3_PASSWORDenvironment variables. This is a secure practice for credential management, as it avoids hardcoding sensitive information directly in the instructions or code. - [INDIRECT_PROMPT_INJECTION]: The
gns3_import_projecttool accepts afile_pathas input. While processing external files can theoretically introduce indirect prompt injection if the file contains malicious instructions that the agent later interprets, this is a standard functional requirement for an import tool and the risk is considered low.
Audit Metadata