netbox-ndx
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill correctly utilizes environment variables for sensitive data, such as
$NETBOX_TOKENand$NETBOX_URL, adhering to secure API integration practices. - [SAFE]: All external resource references, including documentation at
netboxlabs.comand the community repository atgithub.com/netbox-community, are official and appropriate for the skill's purpose. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from the NDX API. While this represents a theoretical attack surface for indirect prompt injection, it is the primary intended function of the skill and the source is a curated vendor catalog.
- Ingestion points:
import-records/andenrichments/API endpoints (SKILL.md). - Boundary markers: None present in the instructions.
- Capability inventory:
POSTandPATCHoperations to NetBox API endpoints (SKILL.md, references/consume-workflows.md). - Sanitization: Not explicitly implemented in the skill instructions.
Audit Metadata