ngrok-engine
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves exclusively as a technical documentation and reference library for the ngrok platform. It contains no executable scripts, binaries, or active code that could be exploited to perform unauthorized actions on a host system.
- [SAFE]: All external resource links and documentation pointers target official vendor domains (ngrok.com), consistent with the skill's stated purpose and authorship by ngrok.
- [SAFE]: The skill explicitly promotes secure configuration practices, such as utilizing ngrok's Vault feature (
secrets.get) to handle sensitive tokens and credentials rather than hardcoding them in configuration files. - [SAFE]: Analysis of the Traffic Policy examples confirms they are provided for instructional purposes, including security-centric configurations like IP restriction, webhook verification, and automated redaction of sensitive data (SSNs, credit cards) using regex find-and-replace actions.
- [SAFE]: The skill does not possess any data ingestion surfaces or autonomous execution capabilities that would facilitate prompt injection or data exfiltration.
Audit Metadata