setup-service-scanner
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows standard operational patterns for platform configuration. It interacts exclusively with authorized Anypoint Platform APIs (urn:api:agent-scanner-configuration-service and urn:api:access-management) to perform its documented functions.
- [DATA_EXPOSURE]: The skill involves the handling of sensitive cloud credentials (e.g., AWS Access Keys, Azure credentials). It explicitly asks the user to provide these credentials via the
authParametersfield. While this involves sensitive data, it is the primary and documented purpose of the skill (configuring a connection) and the data is passed to an internal platform API rather than an external or untrusted endpoint. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it retrieves target system metadata (IDs and types) from an API and uses that data to drive subsequent steps (connectivity tests and configuration creation). However, since the data source is a controlled organizational API, the risk of malicious injection is negligible in this context.
Audit Metadata