netbox-branching
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill uses environment variables ($NETBOX_TOKEN, $NETBOX_URL) for API authentication in its examples, following security best practices to avoid credential exposure.
- [PROMPT_INJECTION]: The skill presents an indirect prompt injection surface as it processes data from the NetBox API and external documentation to perform branch operations.
- Ingestion points: NetBox REST API endpoints and vendor documentation hosted on netboxlabs.com and GitHub.
- Boundary markers: None identified in the provided instructions.
- Capability inventory: The skill can perform data modification and lifecycle operations (create, sync, merge, archive) on NetBox branches.
- Sanitization: No specific sanitization or validation of the ingested API data is described.
Audit Metadata