Skills
Navigate
skills/vinzscam/backstage-skills/using-backstage-identity/Gen Agent Trust Hub

using-backstage-identity

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill documents how to ingest and display user identity and profile data retrieved from the Backstage identity API. \n
  • Ingestion points: The CurrentUserBanner component in references/current-user.md displays profile data (displayName, userEntityRef) retrieved via identityApi.getProfileInfo() and identityApi.getBackstageIdentity(). \n
  • Boundary markers: As this is a framework-specific reference for UI display, explicit boundary markers are not included in the UI rendering logic. \n
  • Capability inventory: The skill utilizes standard frontend capabilities, specifically React rendering and Backstage-provided UI components for data presentation. \n
  • Sanitization: The implementation relies on standard React and framework-level protections when rendering the retrieved identity data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 09:14 AM
Security Audit — agent-trust-hub — using-backstage-identity