integrate-backend
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- Secure Architectural Guidance: The skill promotes a 'Secure Action Principle' which encourages developers to handle both validation and execution on the server for sensitive operations. This approach helps ensure that business rules are consistently applied and cannot be easily bypassed by technical users attempting to modify client-side requests directly.\n- Data Analysis Considerations: The skill reviews user requirements and local project files to generate its integration plans.\n
- Ingestion points: Requirements are collected from user-provided arguments and filesystem scans of the Power Pages site (described in Phase 1 and 2 of
SKILL.md).\n - Boundary markers: The skill relies on the logic of specialized implementation skills to handle data boundaries when routing tasks during Phase 4.\n
- Capability inventory: The skill utilizes the
Bashtool to run local analysis scripts,Writeto create the HTML implementation plan, andSkillfor coordinating child tasks (documented inSKILL.md).\n - Sanitization: The
assets/backend-plan.htmltemplate includes built-in security functions to escape text and validate protocols, ensuring that the visual representation of the plan in the browser is handled safely.\n- Internal Tool Usage: The skill uses Node.js scripts located within the plugin root environment for tasks such as environment discovery and version checking. These scripts are invoked via theBashtool to analyze project metadata and assist in plan generation, representing standard development utility usage.
Audit Metadata