kongctl-query
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed exclusively for read-only operations using the
kongctlcommand-line interface to inspect Kong Konnect resources. - [SAFE]: It contains explicit safety instructions to protect credentials, specifically directing the agent to never echo, log, or paste token values (PAT/SPAT) into responses or logs.
- [SAFE]: Command execution is restricted to information gathering (e.g.,
kongctl help,kongctl get) and debugging configuration (e.g.,env | grep '^KONGCTL_'). These are standard operations for a developer tool and do not involve unauthorized data exfiltration or privilege escalation. - [SAFE]: The skill correctly directs users to separate tools or skills for destructive or mutating actions (plan, apply, sync, create, delete), maintaining a clear security boundary for the 'query' role.
Audit Metadata