sailpoint-orphan-and-dormant-account-report
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
sailCLI to interact with SailPoint APIs for environment selection, source listing, and account/identity retrieval. - [PROMPT_INJECTION]: The skill processes data from the SailPoint Identity Security Cloud, creating an attack surface for indirect prompt injection.
- Ingestion points: Account and identity data are retrieved through
sail apicommands inSKILL.md. - Boundary markers: No specific delimiters are used when formatting API data into reports.
- Capability inventory: The skill can disable or delete accounts using the
sailCLI. - Sanitization: There is no evidence of data sanitization before interpolation into the output.
- [EXTERNAL_DOWNLOADS]: The skill utilizes the
sailCLI, which is a legitimate tool provided by SailPoint, a well-known identity security service.
Audit Metadata