skills/ngrok/skills/ngrok-engine/Gen Agent Trust Hub

ngrok-engine

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves exclusively as a technical documentation and reference library for the ngrok platform. It contains no executable scripts, binaries, or active code that could be exploited to perform unauthorized actions on a host system.
  • [SAFE]: All external resource links and documentation pointers target official vendor domains (ngrok.com), consistent with the skill's stated purpose and authorship by ngrok.
  • [SAFE]: The skill explicitly promotes secure configuration practices, such as utilizing ngrok's Vault feature (secrets.get) to handle sensitive tokens and credentials rather than hardcoding them in configuration files.
  • [SAFE]: Analysis of the Traffic Policy examples confirms they are provided for instructional purposes, including security-centric configurations like IP restriction, webhook verification, and automated redaction of sensitive data (SSNs, credit cards) using regex find-and-replace actions.
  • [SAFE]: The skill does not possess any data ingestion surfaces or autonomous execution capabilities that would facilitate prompt injection or data exfiltration.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 11:08 AM