okta-cis-to-descope
Pass
Audited by Gen Agent Trust Hub on Nov 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate migration guidance and automation for transitioning between identity providers.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the local codebase and external API responses to generate a migration plan. * Ingestion points: Local application source files (.ts, .js, .py, .go) and Okta Management API responses. * Boundary markers: The skill instructs the agent to present the generated migration plan to the user for explicit review before any code changes are executed. * Capability inventory: The skill utilizes file system search (grep, find), network requests (curl), and package managers (npm, pip, go). * Sanitization: The skill relies on manual user verification of the produced plan, as it involves codebase-wide changes.
- [EXTERNAL_DOWNLOADS]: The skill references and suggests installation of official SDKs and components from 'descope' domains and repositories, as well as accessing official Okta API endpoints. These are recognized vendor resources and trusted well-known services.
- [COMMAND_EXECUTION]: The skill executes shell commands using grep and find to analyze the local project and curl to query the Okta API. These commands are transparently defined and used for the stated purpose of identifying migration touchpoints.
Audit Metadata