fastly-ngwaf

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill interacts exclusively with official Fastly infrastructure (api.fastly.com) and utilizes the vendor's official command-line interface (fastly-cli).
  • [SAFE]: Credential management follows best practices. Instructions explicitly advise users to set FASTLY_API_KEY in their local environment and warn against pasting keys into the chat or printing them in command output.
  • [SAFE]: Shell operations in assess_ngwaf_rules.sh are contained to auditing tasks. The script performs read-only operations via curl to fetch workspace and rule metadata for reporting purposes.
  • [SAFE]: The audit logic (checking for missing rules like LOGINDISCOVERY or LOGINATTEMPT) is aligned with the skill's stated purpose of improving NGWAF security posture.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 11:40 AM