skills/mukul975/anthropic-cybersecurity-skills/configuring-zscaler-private-access-for-ztna/Gen Agent Trust Hub
configuring-zscaler-private-access-for-ztna
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the ZPA App Connector package and its associated GPG key from Zscaler's official distribution domains (dist.private.zscaler.com and yum.private.zscaler.com). These are well-known services and the references are documented neutrally for deployment purposes.
- [PRIVILEGE_ESCALATION]: Standard administrative commands (sudo) are used for the installation and management of the ZPA App Connector service on Linux systems, which is appropriate for the skill's stated purpose of infrastructure deployment.
- [REMOTE_CODE_EXECUTION]: The skill contains commands that fetch and pipe a GPG key to apt-key, which is a standard procedure for configuring secure package repositories from trusted vendors like Zscaler.
- [SAFE]: Credential management in the provided Python scripts follows safe practices by requiring client_id and client_secret to be passed as command-line arguments rather than hardcoding them in the source code.
Audit Metadata