fastly-ngwaf
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts exclusively with official Fastly infrastructure (
api.fastly.com) and utilizes the vendor's official command-line interface (fastly-cli). - [SAFE]: Credential management follows best practices. Instructions explicitly advise users to set
FASTLY_API_KEYin their local environment and warn against pasting keys into the chat or printing them in command output. - [SAFE]: Shell operations in
assess_ngwaf_rules.share contained to auditing tasks. The script performs read-only operations viacurlto fetch workspace and rule metadata for reporting purposes. - [SAFE]: The audit logic (checking for missing rules like
LOGINDISCOVERYorLOGINATTEMPT) is aligned with the skill's stated purpose of improving NGWAF security posture.
Audit Metadata