implementing-scim-provisioning
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing official Scalekit SDKs for various languages (Node.js, Python, Go, Java) using standard package managers. These are legitimate resources provided by the vendor, scalekit-inc.
- [COMMAND_EXECUTION]: Instructions include standard shell commands for package installation (npm, pip, go get). These are routine developer tasks for setting up a project environment.
- [DATA_EXFILTRATION]: While the skill manages API keys and user data, it explicitly instructs users to store credentials in environment variables and avoid hardcoding. It also implements signature verification for webhooks to ensure the integrity and authenticity of external data before processing.
- [PROMPT_INJECTION]: The skill handles external data via SCIM webhooks and API responses. It mitigates potential injection risks by requiring signature verification as a mandatory security guardrail, ensuring that only trusted payloads from Scalekit are processed.
Audit Metadata