splunk-ingest-processor-setup

Pass

Audited by Gen Agent Trust Hub on Jun 28, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The Python script render_assets.py uses subprocess.run() to invoke a sibling script (spl2_pipeline_kit.py) located within the same project repository. This is used to render SPL2 templates and is limited to local file execution.
  • [CREDENTIALS_UNSAFE]: The skill implements a validate_secret_fields function that proactively scans input for secret-related keywords (e.g., 'password', 'token', 'private_key'). It raises a ValueError if it detects raw secret material, ensuring sensitive information is not accidentally rendered into the output files.
  • [SAFE]: The skill uses a safe_name sanitization function to ensure user-provided strings used in filenames are restricted to safe alphanumeric characters and symbols, preventing filesystem-related injection risks.
  • [EXTERNAL_DOWNLOADS]: All external references in the documentation point to official Splunk documentation and help sites. The skill does not perform any runtime network downloads of executable code.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 28, 2026, 05:51 PM
Security Audit — agent-trust-hub — splunk-ingest-processor-setup