apply-policy-to-api-instance
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements a standard administrative workflow for the Mulesoft Anypoint Platform. It utilizes organizational discovery, environment scoping, and asset identification to ensure policies are applied correctly to the intended target. The instructions provide helpful troubleshooting and verification steps consistent with legitimate platform management.- [INDIRECT_PROMPT_INJECTION]: The skill possesses a theoretical surface for indirect prompt injection due to data ingestion, though it is consistent with its primary purpose. 1. Ingestion points: Policy template configurations and property schemas are ingested from the Anypoint Exchange catalog via the getExchangePolicyTemplates operation in SKILL.md. 2. Boundary markers: No explicit boundary markers or instructions to disregard embedded commands are included when processing template data. 3. Capability inventory: The skill performs network-based API configuration updates using the applyApiInstancePolicy operation in SKILL.md. 4. Sanitization: The skill relies on the Anypoint Platform's backend validation to ensure configuration data matches the required JSON schema.
Audit Metadata