skills/pingidentity/ping-sdk-agent-skills/ping-orchestration-reactjs-js-davinci-sdk/Gen Agent Trust Hub
ping-orchestration-reactjs-js-davinci-sdk
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill does not contain any malicious patterns such as prompt injection, unauthorized data access, or obfuscation. It follows security best practices for credential management by using environment variables instead of hardcoded secrets.
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install legitimate, well-known NPM packages including
@forgerock/davinci-client,react, andreact-router-domfrom the official registry. These are standard dependencies for the described functionality. - [COMMAND_EXECUTION]: Includes a local utility script
scripts/scaffold_auth.shdesigned to help developers set up their project structure by copying the provided template files. This is a standard developer-oriented task and does not execute remote code or perform unauthorized system changes.
Audit Metadata