konnect-monetization
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data exfiltration attempts were detected. The skill is designed to interact exclusively with the official Kong Konnect platform infrastructure.
- [CREDENTIALS_UNSAFE]: The skill instructions correctly guide the user to provide authentication via environment variables (e.g.,
KONNECT_TOKEN). It provides diagnostic advice for missing tokens without requesting the exposure of secrets within the prompt or persistent storage. - [INDIRECT_PROMPT_INJECTION]: The workflow involves processing external pricing data, such as raw HTML from pricing pages. This ingestion surface is mitigated by strict processing instructions (Step 2) and mandatory human-in-the-loop approval requirements (Step 5) before any billing entities are created or modified in the live environment.
- [COMMAND_EXECUTION]: The skill uses specialized Model Context Protocol (MCP) tools and REST API calls to interact with the Kong backend. These operations are scoped to the intended functional purpose of the skill and do not involve arbitrary shell command execution or unauthorized system access.
Audit Metadata