descope-fga-schema
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill interacts with the Descope Management MCP to perform administrative actions such as reading, validating, and applying authorization schemas through
GetFGASchema,DryRunSchema, andCreateFGASchematools. - [SAFE]: Implements a comprehensive 'Edit-Safety Protocol' that requires the agent to read the current state before modifications and provides explicit warnings to the user if a change would result in the permanent deletion of authorization data.
- [SAFE]: Enforces a strict multi-turn workflow where the agent must perform a dry run, display the proposed changes and warnings, and receive explicit user approval in a separate turn before executing the final application command.
- [SAFE]: Includes a connectivity probe at the start of the interaction to ensure the environment is correctly configured and authorized, preventing unnecessary work or exposure in misconfigured environments.
Audit Metadata