set-app-registration-native
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill executes shell commands using
Bashto verify file existence and run local scripts for environment verification. \n- Dynamic Execution: It utilizesnode -eto perform inline JSON parsing and data extraction from files such aspower.config.json. This allows the agent to access configuration values programmatically. \n- Local Script Execution: The skill runs a bundled script (resolve-environment.js) to resolve environment and tenant identifiers. Executing scripts distributed with the skill is a standard pattern for managing logic. \n- Data Processing Considerations: The skill ingests data from local configuration files (power.config.json,auth.config.json) and has file-write capabilities. While this presents an ingestion surface, the risk is addressed through input validation (GUID format) and instructions to avoid sensitive data storage.
Audit Metadata