configuring-multi-factor-authentication-with-duo

Pass

Audited by Gen Agent Trust Hub on Apr 17, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: No behavioral overrides or safety bypass instructions were detected. The instructions use natural language to guide implementation without attempting to manipulate agent constraints.
  • [CREDENTIALS_UNSAFE]: The skill correctly handles sensitive Duo API credentials by using command-line arguments and providing placeholders in the documentation. No real secrets are hardcoded.
  • [EXTERNAL_DOWNLOADS]: All external references and dependencies, such as the duo_client library and Duo API documentation, point to official and well-known service domains.
  • [DATA_EXFILTRATION]: Network connectivity is strictly used for interacting with the official Duo Admin API. There is no evidence of unauthorized data transfer to third-party or unknown servers.
  • [COMMAND_EXECUTION]: The workflows involve standard administrative commands for configuring the Duo Authentication Proxy and integrating with VPN/SSH. No suspicious or hidden subprocess execution was found in the provided Python scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 17, 2026, 10:04 AM
Security Audit — agent-trust-hub — configuring-multi-factor-authentication-with-duo