set-app-registration-native

Pass

Audited by Gen Agent Trust Hub on Sep 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution: The skill executes shell commands using Bash to verify file existence and run local scripts for environment verification. \n- Dynamic Execution: It utilizes node -e to perform inline JSON parsing and data extraction from files such as power.config.json. This allows the agent to access configuration values programmatically. \n- Local Script Execution: The skill runs a bundled script (resolve-environment.js) to resolve environment and tenant identifiers. Executing scripts distributed with the skill is a standard pattern for managing logic. \n- Data Processing Considerations: The skill ingests data from local configuration files (power.config.json, auth.config.json) and has file-write capabilities. While this presents an ingestion surface, the risk is addressed through input validation (GUID format) and instructions to avoid sensitive data storage.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 7, 2026, 07:04 AM
Security Audit — agent-trust-hub — set-app-registration-native