gamma-enterprise-rbac
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is strictly instructional and provides legitimate code examples for building secure authorization layers in web applications.
- [DATA_EXPOSURE_AND_EXFILTRATION]: No hardcoded secrets or sensitive file paths were detected. The implementation patterns shown utilize environment variables (
process.env.GAMMA_API_KEY) and suggest database encryption for sensitive configuration, which aligns with security best practices. - [REMOTE_CODE_EXECUTION]: No remote code execution patterns, shell commands, or unverifiable dependency installations were identified.
- [OBFUSCATION]: The content is clear and readable with no detected use of encoding (Base64, hex), zero-width characters, or hidden text patterns.
- [INDIRECT_PROMPT_INJECTION]: While the skill describes an architecture that processes external data, it explicitly outlines the implementation of authorization boundaries and tenant isolation to prevent unauthorized resource access.
Audit Metadata