navan-debug-bundle

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs diagnostic tasks for the Navan API, a well-known service. All network operations using curl target official api.navan.com endpoints, which is consistent with the skill's stated purpose.
  • [SAFE]: The skill handles sensitive credentials using environment variables rather than hardcoding. It explicitly includes a sanitization routine that uses sed to redact NAVAN_CLIENT_ID and NAVAN_CLIENT_SECRET from the collected files before they are compressed into the final debug bundle.
  • [SAFE]: No malicious patterns such as prompt injection, obfuscation, or persistence mechanisms were detected. The command execution is limited to standard diagnostic tools (curl, jq, tar) scoped to the local bundle directory.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 12:36 PM
Security Audit — agent-trust-hub — navan-debug-bundle