netsuite-sdf-project-documentation
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill contains explicit instructions to ignore commands embedded in analyzed source code. Surface analysis: 1. Ingestion points: scripts, object XML files, manifest, and SuiteQL queries. 2. Boundary markers: Absent. 3. Capability inventory: File system read/write and git commit suggestions. 4. Sanitization: Instructions to ignore embedded commands and redact credentials.
- [DATA_EXFILTRATION]: Redaction rules for secrets and PII are defined to prevent accidental exposure, while allowing technical identifiers like script IDs necessary for documentation.
- [SAFE]: The skill behavior and authorship (Oracle NetSuite) align with its stated purpose of static documentation generation.
- [SAFE]: No obfuscation, persistence, or remote code execution patterns were identified.
Audit Metadata