pdk-templates
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a technical reference for the MuleSoft PDK ecosystem, providing standard templates for policy development. The contents are entirely consistent with the developer-focused purpose described in the metadata.
- [EXTERNAL_DOWNLOADS]: The templates reference the official Anypoint registry for SDK components and common public registries for standard libraries. These dependencies are expected and safe within the context of the vendor's supported development lifecycle.
- [CREDENTIALS_UNSAFE]: Several templates contain placeholder credentials, such as dummy HMAC keys and a Base64-encoded 'admin:admin' string. These are explicitly documented as placeholders, and the skill instructions direct the user to replace them with actual values, following standard security practices for boilerplate code.
- [COMMAND_EXECUTION]: The skill mentions external tools like Anypoint CLI and Make for project management. It correctly delegates these operations to sibling skills focused on environment setup and deployment, maintaining a secure separation of tasks.
- [PROMPT_INJECTION]: The skill includes instructions to avoid summarizing or paraphrasing code snippets. This is used to ensure the technical accuracy of the provided Rust code rather than to override or bypass safety protocols.
Audit Metadata