documenso-enterprise-rbac
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill provides high-quality, security-focused implementation examples for a legitimate SaaS integration.
- [INDIRECT_PROMPT_INJECTION]: The skill manages an attack surface for processing external data via API endpoints in the implementation guide. 1. Ingestion points: The skill defines routes in implementation-guide.md that accept untrusted data via req.body and req.params. 2. Boundary markers: It includes explicit permission-checking middleware (requirePermission) and role-based access control logic. 3. Capability inventory: Tools are limited to Documenso SDK functions for document management. 4. Sanitization: The examples demonstrate sanitization through ID parsing and role verification.
Audit Metadata