build-mule-integration

Pass

Audited by Gen Agent Trust Hub on May 15, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing @mulesoft/anypoint-cli-v4 and @salesforce/anypoint-cli-dx-mule-plugin from official registries. These are official tools provided by vendor organizations for Mule integration development.\n- [COMMAND_EXECUTION]: The skill executes anypoint-cli-v4, mvn, jq, and several bundled bash scripts to perform its tasks. These operations are restricted to the local development environment and are required for the project's lifecycle.\n- [DATA_EXFILTRATION]: Configuration files such as ~/.mule-dx/config.json are read locally to determine the Mule runtime path and validate prerequisites.\n- [PROMPT_INJECTION]: The skill processes data from Anypoint Exchange and user prompts to generate XML configuration and DataWeave transforms.\n
  • Ingestion points: CLI output from get_latest_connector.sh and describe_connector.sh, as well as user input.\n
  • Boundary markers: The workflow includes a Technical Design Summary in Step 7 that requires explicit user approval before any project files are created or build operations are performed.\n
  • Capability inventory: Bash tool for project creation and mvn builds, and Write and Edit tools for file management.\n
  • Sanitization: Structural validation of XML and error-type whitelisting are performed by scripts/validate_before_build.sh before the application is built.
Audit Metadata
Risk Level
SAFE
Analyzed
May 15, 2026, 05:35 PM
Security Audit — agent-trust-hub — build-mule-integration