cerbos-synapse-extension
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a comprehensive developer resource for Cerbos Synapse, providing safe code patterns and architectural guidance.
- [EXTERNAL_DOWNLOADS]: The skill describes how to fetch Synapse Docker images from a vendor distribution repository and build tools (wasm-tools, binaryen, python-pdk) from established GitHub organizations. These are standard operations for the target development environment.
- [COMMAND_EXECUTION]: Documentation provides standard CLI commands for local development workflows, including
docker compose,make build, andsynapse test, which are intended to be run by the user for testing their own extension code. - [INDIRECT_PROMPT_INJECTION]: The skill explicitly warns users about potential security risks in specific built-in hooks (like Claude Code and Tailscale Aperture), noting where default-allow behaviors exist and emphasizing the need for robust policy definitions. This documentation serves as a security mitigation guide.
Audit Metadata