netbox-custom-scripts
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [SAFE]: The skill serves as a technical guide for writing NetBox custom scripts. It uses official documentation links and references well-known repositories associated with the NetBox community and the vendor, Netbox Labs. All documented practices align with standard software development and NetBox administration guidelines.
- [COMMAND_EXECUTION]: Includes standard commands for verifying the NetBox environment via
curland running scripts via the Django management interface (python manage.py runscript). These are appropriate for the intended developer and administrator audience and target the user's own infrastructure. - [CREDENTIALS_UNSAFE]: Demonstrates secure practices by recommending the use of environment variables (e.g.,
$NETBOX_TOKEN) for API authentication rather than hardcoding sensitive credentials. Placeholders used in API examples (e.g.,nbt_abc123.xxxxxxxx) follow the standard NetBox token format without exposing real secrets. - [INDIRECT_PROMPT_INJECTION]: While the skill documents the
FileVartype which allows scripts to ingest external data, it emphasizes the use offull_clean()for model-level validation and provides structured patterns for handling input, minimizing the risk of data corruption or unexpected behavior from untrusted content.
Audit Metadata