splunk-setup-page-builder
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions and code templates for building user-facing setup screens that ingest data such as API endpoints and tokens.
- Ingestion points: User input fields defined in
setup_page_dashboard.xmland handled insetup_page.js. - Boundary markers: The
validatefunction insetup_page.jsprovides client-side validation before processing. - Capability inventory: The skill uses the Splunk JS SDK to write to configuration files via the
configurationsREST endpoint and to the encryptedstorage/passwordsservice. - Sanitization: Includes regex validation for URL patterns and string trimming logic.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing
splunk-appinspectviapip. This is the official Splunk-provided tool for app certification and security scanning, used here for legitimate development and verification purposes. The download originates from the official Python Package Index and belongs to the vendor ecosystem.
Audit Metadata