glean-rate-limits

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a developer guide for interacting with Glean's Indexing and Client APIs. The provided TypeScript snippets are standard implementations for rate limiting and network request management.
  • [INDIRECT_PROMPT_INJECTION]: The skill includes patterns for processing external documents for indexing.
  • Ingestion points: The bulkIndexDocuments function in SKILL.md accepts a docs array containing external data.
  • Boundary markers: None are explicitly defined in the reference code.
  • Capability inventory: The skill uses fetch to perform network operations against Glean API endpoints.
  • Sanitization: The instructions recommend omitting tokens and sensitive payloads from output receipts, though specific input sanitization for the indexing corpus is not detailed in the snippets.
  • [COMMAND_EXECUTION]: The YAML frontmatter lists Bash(npm:*) and Bash(curl:*) in the allowed-tools field. This is a platform configuration that restricts the environment to these specific tool subsets and does not indicate malicious intent.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:49 AM
Security Audit — agent-trust-hub — glean-rate-limits