mindtickle-sdk-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill contains no executable scripts or malicious commands. The instructions focus on architectural patterns for API integration.
- [DATA_EXPOSURE]: The skill explicitly mandates the use of approved secret providers and requires redacting request logs to prevent sensitive data leakage.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes external API artifacts and documentation, it includes robust defensive instructions. Evidence Chain: (1) Ingestion: Processes tenant API artifacts and documentation via Read and WebFetch tools. (2) Boundaries: Requires validation at the boundary and rejection of undocumented fields. (3) Capabilities: Uses Write and Edit for adapter generation and WebFetch for documentation. (4) Sanitization: Specifically instructs to redact logs and quarantine payloads violating contracts.
Audit Metadata