splunk-ingest-processor-setup
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The Python script
render_assets.pyusessubprocess.run()to invoke a sibling script (spl2_pipeline_kit.py) located within the same project repository. This is used to render SPL2 templates and is limited to local file execution. - [CREDENTIALS_UNSAFE]: The skill implements a
validate_secret_fieldsfunction that proactively scans input for secret-related keywords (e.g., 'password', 'token', 'private_key'). It raises aValueErrorif it detects raw secret material, ensuring sensitive information is not accidentally rendered into the output files. - [SAFE]: The skill uses a
safe_namesanitization function to ensure user-provided strings used in filenames are restricted to safe alphanumeric characters and symbols, preventing filesystem-related injection risks. - [EXTERNAL_DOWNLOADS]: All external references in the documentation point to official Splunk documentation and help sites. The skill does not perform any runtime network downloads of executable code.
Audit Metadata