enable-enterprise-issuer
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill specifies a detailed process for tool discovery and invocation using platform tools like search_platform_tools and describe_platform_tool. It instructs the agent on how to handle situations where named tools are missing by searching for them dynamically and describing their parameters before execution. It also defines a pathing convention for platform tools using 'platform--' prefixes during multi-step read operations.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from platform tools such as get_internal_session_issuer and get_xaa_readiness to determine workflow state. Ingestion points include organization discovery and readiness tool outputs. Boundary markers are implemented through instructions to never guess organization names, match user specifications exactly, and require user confirmation before proceeding. The capability inventory is limited to read-only discovery tools within this specific workflow, and sanitization is addressed by requiring exact value matching for organization IDs and state markers.
Audit Metadata