meraki-wireless-ops
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external Cisco Meraki API endpoints (such as SSID names and client connectivity events) which constitutes an attack surface for indirect prompt injection.
- Ingestion points: Data is retrieved from official Cisco Meraki endpoints via the execute_api tool as documented in SKILL.md.
- Boundary markers: The skill does not explicitly define delimiters to separate untrusted API data from agent instructions.
- Capability inventory: The skill is restricted to read-only network operations (execute_api) and discovery (semantic_search); it does not have capabilities for file system writing, subprocess execution, or dynamic code evaluation.
- Sanitization: No specific data sanitization or validation logic is defined for the API responses.
Audit Metadata