aic-app-integration
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for importing official SDKs and libraries from trusted repositories and registries.
- References Android SDKs hosted on Maven Central and maven.pingidentity.com.
- References the iOS SDK via the official vendor GitHub repository: github.com/ForgeRock/ping-ios-sdk.
- References web integration packages via npm: @forgerock/journey-client and @forgerock/oidc-client.
- [INDIRECT_PROMPT_INJECTION]: The skill describes methods for processing dynamic authentication data from the identity cloud which serves as an input surface.
- Ingestion points: Authentication journey callbacks and OIDC discovery endpoints.
- Boundary markers: The documentation does not specify explicit delimiters for the agent to isolate untrusted data during runtime processing.
- Capability inventory: Implementation logic for UI rendering, network communication for OIDC flows, and secure token management.
- Sanitization: The skill explicitly mandates security checks including JWT signature verification, state/nonce validation, and CORS origin verification.
Audit Metadata