netbox-api-integration
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for ingesting and processing data from external NetBox REST and GraphQL API endpoints.
- Ingestion points: Data enters the agent's context through API responses fetched in scripts using
requests,httpx, or thepynetboxSDK as described inSKILL.md,rest-api-patterns.md, andgraphql-patterns.md. - Boundary markers: No specific delimiters or warnings for the agent to ignore embedded instructions in the fetched data are provided in the implementation examples.
- Capability inventory: The skill utilizes network operations (REST, GraphQL, gRPC), credential provisioning via the
/api/users/tokens/provision/endpoint, and file system interactions (e.g., indiode-integration.mdfor dry-run output). - Sanitization: No explicit sanitization or filtering of API content for prompt injection characters is documented in the code snippets.
- [SAFE]: The skill references official vendor SDKs and tools including
netboxlabs-diode-sdk,netbox-graphql-query-optimizer, and thepynetboxcommunity library. - [SAFE]: The documentation explicitly promotes security best practices, such as never storing tokens in code and using environment variables for credential management.
Audit Metadata