develop-pdk-policy

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill follows established vendor-recommended practices for policy development and deployment.
  • [COMMAND_EXECUTION]: Executes shell commands via make and anypoint-cli-v4 for project initialization, WebAssembly compilation, and local testing. These operations are transparent, necessary for the stated purpose, and interact with the user's local development environment.
  • [EXTERNAL_DOWNLOADS]: Facilitates the installation of official components such as the anypoint-pdk-plugin and cargo-anypoint from trusted registries. These downloads are associated with the official MuleSoft PDK ecosystem.
  • [DATA_EXPOSURE]: Includes checks for environment configuration using anypoint-cli-v4 conf to ensure the user is authenticated. This information is used within the local session context to verify readiness for deployment.
  • [SAFE]: The skill actively encourages security by instructing the developer to use specific annotations (@context.@characteristics: [security:sensitive]) to mask secrets in policy configurations, demonstrating a security-conscious design.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 12:15 AM
Security Audit — agent-trust-hub — develop-pdk-policy