port-integrations
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats identified. The skill is purely instructional and operational for the Port developer platform.
- [DATA_EXPOSURE]: The provided reference examples in the
port-install-integration/references/examples/directory use dummy data, redacted fields (e.g.,[REDACTED],00000000-0000-0000-0000-000000000000), and placeholder values. No real credentials or sensitive secrets are exposed. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of external tool data. It provides robust guidance on using JQ patterns for normalization, filtering, and safe parsing (e.g., using
//fallbacks and null-safe navigation), which helps maintain the integrity of the data catalog. - [EXTERNAL_DOWNLOADS]: All external links point to official service documentation (
docs.port.io), public JQ documentation (jqlang.org), or the vendor's official GitHub repository (github.com/port-labs/port-skills). - [COMMAND_EXECUTION]: A Markdown comment within an example payload (
azure-devops.md) mentionspip install rds-tool. This is identified as a legitimate utility for AWS RDS management and is consistent with the skill's context.
Audit Metadata