skills/mukul975/anthropic-cybersecurity-skills/deploying-palo-alto-prisma-access-zero-trust/Gen Agent Trust Hub
deploying-palo-alto-prisma-access-zero-trust
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The deployment workflow fetches a CloudFormation template from
https://prisma-access-connector-templates.s3.amazonaws.com/ztna-connector-aws.yaml. This is a standard practice for deploying Palo Alto Prisma Access ZTNA connectors in AWS environments and targets a vendor-associated resource. - [COMMAND_EXECUTION]: The skill provides operational commands for AWS stack creation and GlobalProtect configuration file generation (
pre-deploy.xml). These actions are standard for infrastructure deployment and endpoint configuration management. - [INDIRECT_PROMPT_INJECTION]: The audit script (
scripts/agent.py) reads security configuration and logs from Palo Alto SASE APIs. This is a standard management surface for security auditing, and the script does not perform unsafe operations with the ingested data. - [SAFE]: No malicious obfuscation, credential exfiltration, or unauthorized persistence mechanisms were detected. The skill uses official Palo Alto Networks endpoints for authentication and management functionality.
Audit Metadata