splunk-setup-page-builder

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill provides instructions and code templates for building user-facing setup screens that ingest data such as API endpoints and tokens.
  • Ingestion points: User input fields defined in setup_page_dashboard.xml and handled in setup_page.js.
  • Boundary markers: The validate function in setup_page.js provides client-side validation before processing.
  • Capability inventory: The skill uses the Splunk JS SDK to write to configuration files via the configurations REST endpoint and to the encrypted storage/passwords service.
  • Sanitization: Includes regex validation for URL patterns and string trimming logic.
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing splunk-appinspect via pip. This is the official Splunk-provided tool for app certification and security scanning, used here for legitimate development and verification purposes. The download originates from the official Python Package Index and belongs to the vendor ecosystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 05:04 AM