skills/mukul975/anthropic-cybersecurity-skills/implementing-delinea-secret-server-for-pam/Gen Agent Trust Hub
implementing-delinea-secret-server-for-pam
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill contains PowerShell instructions for configuring Windows Server, IIS, and SQL Server. Evidence: Deployment steps in SKILL.md utilize commands like
Install-WindowsFeatureandInvoke-Sqlcmd. These are appropriate for the primary purpose of server installation. - [INDIRECT_PROMPT_INJECTION]: The skill interacts with external API and directory service data.
- Ingestion points: The
agent.pyscript and PowerShell workflows ingest data such as secret names, folder structures, and account metadata from the Secret Server REST API and Active Directory. - Boundary markers: None identified; data is processed as structured JSON or PowerShell objects.
- Capability inventory: The skill includes functions to create secrets, rotate passwords, and modify configurations via the Secret Server API.
- Sanitization: No specific input sanitization for LLM context injection is observed, as the data is primarily intended for administrative use.
Audit Metadata