splunk-dashboard-converter
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill operates as a pure data transformation tool, converting XML to JSON without external dependencies or network capabilities. The limited tool scope (allowed-tools: [Read]) ensures the agent cannot perform unauthorized actions.- [PROMPT_INJECTION]: While the skill ingests untrusted XML as its primary function (Category 8 surface), it implements robust defensive instructions in Phase 1 to ignore any embedded directives. The risk is effectively neutralized by the absence of capabilities to execute code or exfiltrate data.- [NO_CODE]: No Python, JavaScript, or shell scripts are included with the skill; it consists entirely of markdown documentation, JSON metadata, and reference templates. No external code is downloaded or executed.
Audit Metadata