polylane
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
polylanecommand-line interface for interacting with the platform, including cloud connections, resource listing, and incident management. - [DYNAMIC_EXECUTION]: The Polylane MCP provides a
runCodetool that allows agents to execute TypeScript logic directly on the Polylane backend. This is an intended platform feature designed to optimize performance by aggregating multiple tool calls and filtering data before it returns to the agent's context. - [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from production logs, repository content, and third-party telemetry integrations. While this creates a vulnerability surface for indirect injection, the platform enforces safety via human review of code changes (Pull Requests) and a safety review model for write operations.
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation, feature schemas, and integration catalogs from official vendor domains including
docs.polylane.com,api.polylane.com, andmcp.polylane.com. These references are standard for the platform's operation and originate from the author's infrastructure.
Audit Metadata