create-integration
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data, including API documentation URLs and sample data files provided by the user for the purpose of scaffolding and building integrations.
- Ingestion points:
SKILL.md(What to provide tables),references/create-workflow.md(Phase 1), andreferences/add-datastream-workflow.md(Phase 1) describe fetching content from user-provided documentation URLs and reading@-mentioned sample files. - Boundary markers: The instructions do not define explicit delimiters or instructions for subagents to ignore potential commands or injections embedded within the external documentation or sample data.
- Capability inventory: The skill and its delegated subagents have significant local capabilities, including executing shell commands (
elastic-package,go install,docker), writing and modifying project files, and performing network operations for research. - Sanitization: No specific sanitization or validation logic is described for the content of the external documentation or sample data before it is processed by the LLM subagents.
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install several external tools required for the CEL (Common Expression Language) build toolchain.
- Evidence:
references/scaffold-commands.mdcontains instructions to installgithub.com/elastic/mito/cmd/mito,github.com/elastic/celfmt/cmd/celfmt,github.com/efd6/ceplx/cmd/ceplx, andgithub.com/elastic/streamusing thego installcommand. - Note: The tools from the
elasticorganization are official vendor resources. However,github.com/efd6/ceplxoriginates from a third-party personal repository. - [COMMAND_EXECUTION]: The skill heavily relies on the execution of local shell commands for scaffolding, environment setup, testing, and code formatting.
- Evidence: The workflow includes numerous invocations of
elastic-package(e.g.,create,check,stack up,test),go installfor tool management, and domain-specific tools likecelfmtandmitofor CEL program development.
Audit Metadata