navan-debug-bundle
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs diagnostic tasks for the Navan API, a well-known service. All network operations using
curltarget officialapi.navan.comendpoints, which is consistent with the skill's stated purpose. - [SAFE]: The skill handles sensitive credentials using environment variables rather than hardcoding. It explicitly includes a sanitization routine that uses
sedto redactNAVAN_CLIENT_IDandNAVAN_CLIENT_SECRETfrom the collected files before they are compressed into the final debug bundle. - [SAFE]: No malicious patterns such as prompt injection, obfuscation, or persistence mechanisms were detected. The command execution is limited to standard diagnostic tools (
curl,jq,tar) scoped to the local bundle directory.
Audit Metadata