vault-pki
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines tools to ingest and process data from external HashiCorp Vault endpoints.
- Ingestion points: Tools such as
list_pki_issuers,get_pki_role, andlist_certificatesfetch and process data from the Vault PKI API. - Boundary markers: The instructions contain no delimiters or specific warnings to prevent the agent from interpreting external data as instructions.
- Capability inventory: The skill possesses management capabilities, including the ability to issue and revoke certificates and configure PKI roles.
- Sanitization: No mechanisms for sanitizing or escaping the data retrieved from the Vault API are mentioned.
- [NO_CODE]: The skill consists entirely of markdown documentation and tool metadata definitions without any executable scripts or source files.
Audit Metadata