skills/mukul975/anthropic-cybersecurity-skills/implementing-identity-governance-with-sailpoint/Gen Agent Trust Hub
implementing-identity-governance-with-sailpoint
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The script
scripts/agent.pycontains functions to interact with the SailPoint IdentityNow API using therequestslibrary. These network operations are intended for IAM governance auditing and follow standard authentication practices using bearer tokens to communicate with vendor infrastructure. - [INDIRECT_PROMPT_INJECTION]: The skill processes external JSON audit data, representing a standard injection surface for tools that ingest external logs. 1. Ingestion points:
scripts/agent.pyreads files via command-line arguments like--campaignsand--sod. 2. Boundary markers: The script does not utilize explicit delimiters or safety instructions when parsing input data. 3. Capability inventory: The skill can read/write local files and contains definitions for authenticated network requests. 4. Sanitization: No sanitization is applied to the values retrieved from the JSON inputs before they are included in the generated audit report.
Audit Metadata