add-service-client
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive instructions for building resilient and secure service clients, explicitly mandating security protocols like SPIFFE/SPIRE mTLS and OIDC workload identity.
- [SAFE]: It includes specific security guardrails (referenced as OWASP ASI) that instruct the agent to avoid common pitfalls like logging PII, using static API keys for internal calls, and accepting unvalidated external data.
- [INDIRECT_PROMPT_INJECTION]: The skill demonstrates awareness of indirect prompt injection risks (ASI07) by requiring that all outbound call responses be treated as untrusted content and validated against a schema before processing.
- [SAFE]: All referenced tools and technologies (Connect protocol, xDS, OTel) are standard industry patterns for modern service-oriented architectures.
- [SAFE]: No evidence of obfuscation, hardcoded credentials, persistence mechanisms, or unauthorized network operations was found.
Audit Metadata