guidewire-install-auth

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for using standard security and development tools including keytool for JVM trust store management, openssl for certificate inspection, and sops for encrypted secret management.
  • [DYNAMIC_EXECUTION]: A pattern is provided for loading environment variables using eval in conjunction with sops. The instructions include a specific sed filter designed to prevent accidental information leakage during this process.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes handling and decoding JWT tokens and API responses from Guidewire Hub. This represents a standard external data ingestion surface common in API integration skills.
  • [EXTERNAL_DOWNLOADS]: The documentation includes steps for installing gradle using the SDKMAN! tool and cloning repositories from Azure DevOps, which are standard developer setup procedures.
  • [DATA_EXPOSURE_&_EXFILTRATION]: The skill correctly identifies the risk of credential exposure and provides hardened patterns for secret rotation. It references the default Java keystore password 'changeit', which is a well-known non-sensitive default value. All described network traffic is directed toward official Guidewire domains (*.guidewire.net and *.guidewire.com).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:45 AM