zitadel-knowledge-patch
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists entirely of markdown documentation, JSON metadata, and YAML configuration. No executable scripts, binaries, or automated tasks are included that could be executed by the agent.
- [EXTERNAL_DOWNLOADS]: The documentation references official ZITADEL SDKs and installation commands (e.g.,
npm install @zitadel/zitadel-node,pip install zitadel-client,gem install zitadel-client). These are documented correctly as vendor resources for the ZITADEL platform and are provided for educational and implementation guidance. - [COMMAND_EXECUTION]: The skill includes numerous example
curl,sh,caddyfile, anddocker composecommands. These are presented exclusively as reference examples for developers to configure and manage their own ZITADEL instances and do not contain malicious payloads or hidden execution patterns. - [DATA_EXFILTRATION]: No evidence of data exfiltration was found. All network-related information, such as domain references (e.g.,
zitadel.com,cloudflareaccess.com,google.com) and static IP allowlists for cloud egress, are standard technical details for identity provider (IdP) and software-as-a-service (SaaS) configuration.
Audit Metadata