manage-api-version
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
anypoint-cli-v4andmvncommands. These are legitimate project management tools and their usage is scoped to the project directory with explicit error handling and automatic state restoration (rollback) on failure. - [EXTERNAL_DOWNLOADS]: The skill uses
npm install -g @mulesoft/anypoint-cli-v4. This is a download from a well-known service (NPM) and is associated with the official vendor (MuleSoft) for the stated purpose of the skill. - [DATA_EXFILTRATION]: Network operations are restricted to
anypoint-cli-v4queries to Exchange for version discovery. No sensitive files or credentials are sent to external or untrusted domains. - [CREDENTIALS_UNSAFE]: The skill provides instructions for authenticating with
anypoint-cli-v4. It correctly guides users to use standard CLI configuration commands and does not attempt to harvest or hardcode credentials. - [REMOTE_CODE_EXECUTION]: The skill uses a local shell script (
scripts/fetch_versions.sh) to optimize API version discovery. This script performs parallel CLI calls and contains no patterns for executing arbitrary remote code or untrusted input.
Audit Metadata