deploying-palo-alto-prisma-access-zero-trust

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The deployment workflow fetches a CloudFormation template from https://prisma-access-connector-templates.s3.amazonaws.com/ztna-connector-aws.yaml. This is a standard practice for deploying Palo Alto Prisma Access ZTNA connectors in AWS environments and targets a vendor-associated resource.
  • [COMMAND_EXECUTION]: The skill provides operational commands for AWS stack creation and GlobalProtect configuration file generation (pre-deploy.xml). These actions are standard for infrastructure deployment and endpoint configuration management.
  • [INDIRECT_PROMPT_INJECTION]: The audit script (scripts/agent.py) reads security configuration and logs from Palo Alto SASE APIs. This is a standard management surface for security auditing, and the script does not perform unsafe operations with the ingested data.
  • [SAFE]: No malicious obfuscation, credential exfiltration, or unauthorized persistence mechanisms were detected. The skill uses official Palo Alto Networks endpoints for authentication and management functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 06:31 AM