guidewire-install-auth
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for using standard security and development tools including
keytoolfor JVM trust store management,opensslfor certificate inspection, andsopsfor encrypted secret management. - [DYNAMIC_EXECUTION]: A pattern is provided for loading environment variables using
evalin conjunction withsops. The instructions include a specificsedfilter designed to prevent accidental information leakage during this process. - [INDIRECT_PROMPT_INJECTION]: The skill describes handling and decoding JWT tokens and API responses from Guidewire Hub. This represents a standard external data ingestion surface common in API integration skills.
- [EXTERNAL_DOWNLOADS]: The documentation includes steps for installing
gradleusing the SDKMAN! tool and cloning repositories from Azure DevOps, which are standard developer setup procedures. - [DATA_EXPOSURE_&_EXFILTRATION]: The skill correctly identifies the risk of credential exposure and provides hardened patterns for secret rotation. It references the default Java keystore password 'changeit', which is a well-known non-sensitive default value. All described network traffic is directed toward official Guidewire domains (
*.guidewire.netand*.guidewire.com).
Audit Metadata