port-integrations

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No security threats identified. The skill is purely instructional and operational for the Port developer platform.
  • [DATA_EXPOSURE]: The provided reference examples in the port-install-integration/references/examples/ directory use dummy data, redacted fields (e.g., [REDACTED], 00000000-0000-0000-0000-000000000000), and placeholder values. No real credentials or sensitive secrets are exposed.
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of external tool data. It provides robust guidance on using JQ patterns for normalization, filtering, and safe parsing (e.g., using // fallbacks and null-safe navigation), which helps maintain the integrity of the data catalog.
  • [EXTERNAL_DOWNLOADS]: All external links point to official service documentation (docs.port.io), public JQ documentation (jqlang.org), or the vendor's official GitHub repository (github.com/port-labs/port-skills).
  • [COMMAND_EXECUTION]: A Markdown comment within an example payload (azure-devops.md) mentions pip install rds-tool. This is identified as a legitimate utility for AWS RDS management and is consistent with the skill's context.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 04:30 PM