maintainx-enterprise-rbac
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate instructions for configuring enterprise role-based access control and SSO. It follows best practices for secret management and references official documentation and security standards.
- [INDIRECT_PROMPT_INJECTION]: The skill includes code to list users and teams from the MaintainX API, which ingests external data into the agent's context. This is a common pattern for administrative tools and presents minimal risk.
- Ingestion points: MaintainX API responses for users and teams (
SKILL.mdStep 4). - Boundary markers: Absent.
- Capability inventory:
Read,Write,Edit, andBash(npm:*)for package installation. - Sanitization: None; user-provided strings from the API are logged directly to the console.
Audit Metadata