skills/netboxlabs/skills/netbox-ndx/Gen Agent Trust Hub

netbox-ndx

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill correctly utilizes environment variables for sensitive data, such as $NETBOX_TOKEN and $NETBOX_URL, adhering to secure API integration practices.
  • [SAFE]: All external resource references, including documentation at netboxlabs.com and the community repository at github.com/netbox-community, are official and appropriate for the skill's purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from the NDX API. While this represents a theoretical attack surface for indirect prompt injection, it is the primary intended function of the skill and the source is a curated vendor catalog.
  • Ingestion points: import-records/ and enrichments/ API endpoints (SKILL.md).
  • Boundary markers: None present in the instructions.
  • Capability inventory: POST and PATCH operations to NetBox API endpoints (SKILL.md, references/consume-workflows.md).
  • Sanitization: Not explicitly implemented in the skill instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 08:22 PM