glean-enterprise-rbac
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains technical documentation and code examples for implementing Glean RBAC, including permission checks, role assignments, and audit logging.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The implementation templates correctly leverage environment variables (
GLEAN_API_TOKEN,GLEAN_ORG_ID) to handle authentication, avoiding the risk of hardcoded credentials. - [INDIRECT_PROMPT_INJECTION]: The skill describes processing external data such as user IDs and email addresses.
- Ingestion points: The skill handles
userId,documentId, andemailparameters within API interaction logic. - Boundary markers: Not explicitly implemented in the provided code snippets.
- Capability inventory: Network access via
fetchto the Glean API and audit logging viaconsole.log. - Sanitization: Not explicitly detailed in the instructional templates, but the logic is scoped to specific API operations.
Audit Metadata