meraki-switch-ops
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external Cisco Meraki API responses, creating an attack surface where malicious strings (e.g., in device names or notes) could be used to influence agent behavior.
- Ingestion points: Data retrieved through the
execute_apitool from various Meraki organization, network, and device endpoints. - Boundary markers: The instructions do not define specific delimiters or instructions to treat the API output as untrusted content.
- Capability inventory: The skill includes
execute_apifor network operations andsemantic_searchfor capability discovery. - Sanitization: No sanitization, escaping, or validation steps are specified for the data returned by the API before it is processed by the agent.
Audit Metadata