portal-page-design
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a set of design instructions for building portal pages. It does not contain any malicious patterns such as prompt injection, obfuscation, or unauthorized data access.
- [EXTERNAL_DOWNLOADS]: The skill references an authoritative 'Konnect MCP server' to fetch design tokens, component metadata, and syntax rules. This is a functional requirement for maintaining design consistency with the Kong Konnect platform and does not involve downloading untrusted scripts or code.
- [COMMAND_EXECUTION]: The skill mentions existing toolchains like 'kongctl' and Terraform but does not execute shell commands or script files. It instructs the agent to preserve existing workflows when they are already in use.
- [DATA_EXFILTRATION]: While the skill mentions that previewing requires a 'valid token', it does not attempt to harvest, hardcode, or exfiltrate credentials. This is a standard requirement for accessing authenticated portal environments.
- [INDIRECT_PROMPT_INJECTION]: The skill reads existing portal pages and snippets. Although reading external content presents a theoretical attack surface, the risk is minimal as the skill focuses on structural design and validation through a dedicated server rather than executing logic from the read data.
Audit Metadata