meraki-security-appliance

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references Cisco's official Meraki MCP server and a public repository under the CiscoDevNet organization. These are official resources from a well-known technology provider and are used for their intended purpose of API interaction.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external Meraki API endpoints, such as firewall rules and security events. While this represents a data ingestion surface, the risk is significantly mitigated by the skill's structure, which is restricted to read-only operations and does not possess capabilities for file system modification or arbitrary command execution.
  • [COMMAND_EXECUTION]: The skill uses the execute_api tool to communicate with the Meraki MCP. The instructions explicitly state that all mutating operations (POST, PUT, DELETE) are absent from the capability catalogue, ensuring that the tool is used only for data retrieval.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 03:55 PM