apollo-enterprise-rbac
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides code for an API proxy and middleware that ingest untrusted data from request bodies, queries, and headers. This constitutes a vulnerability surface where malformed input could potentially influence the behavior of the agent or downstream systems.
- Ingestion points: Express request objects (
req.body,req.query,req.headers) inSKILL.mdandreferences/implementation-guide.md. - Boundary markers: No delimiters or boundary markers are present in the provided code snippets.
- Capability inventory: The skill utilizes network requests (
axios), cryptographic operations (crypto), and database access (prisma). - Sanitization: No explicit input validation or sanitization logic is included in the provided templates.
- [METADATA_POISONING]: The skill requests
Bash(kubectl:*)access in its frontmatter configuration. This is a high-privilege tool that is not utilized or mentioned within the skill's logic or documentation, indicating excessive permission requests.
Audit Metadata