vault-pki

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill defines tools to ingest and process data from external HashiCorp Vault endpoints.
  • Ingestion points: Tools such as list_pki_issuers, get_pki_role, and list_certificates fetch and process data from the Vault PKI API.
  • Boundary markers: The instructions contain no delimiters or specific warnings to prevent the agent from interpreting external data as instructions.
  • Capability inventory: The skill possesses management capabilities, including the ability to issue and revoke certificates and configure PKI roles.
  • Sanitization: No mechanisms for sanitizing or escaping the data retrieved from the Vault API are mentioned.
  • [NO_CODE]: The skill consists entirely of markdown documentation and tool metadata definitions without any executable scripts or source files.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 03:56 PM