Skills
skills/mukul975/anthropic-cybersecurity-skills/implementing-zero-trust-network-access-with-zscaler/Gen Agent Trust Hub

implementing-zero-trust-network-access-with-zscaler

Pass

Audited by Gen Agent Trust Hub on Apr 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary function is to audit Zscaler Private Access configurations and perform network readiness checks. All scripts perform actions consistent with this stated purpose.
  • [COMMAND_EXECUTION]: The script scripts/process.py performs network diagnostic operations including DNS resolution, TCP port scanning, and TLS certificate validation. These operations are performed using standard Python libraries (socket, ssl) and are used solely for connectivity assessment of user-specified targets.
  • [DATA_EXFILTRATION]: The script scripts/agent.py interacts with the official Zscaler Private Access API at config.private.zscaler.com. This is a well-known service endpoint necessary for retrieving configuration data for auditing. No unauthorized data exfiltration to external or unknown domains was detected.
  • [CREDENTIALS_UNSAFE]: The skill requires Zscaler API credentials to function. The implementation correctly handles these as command-line arguments and does not contain any hardcoded secrets or insecure storage mechanisms.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 13, 2026, 10:33 PM
Security Audit — agent-trust-hub — implementing-zero-trust-network-access-with-zscaler