sailpoint-toxic-access-detector
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
sailCLI to execute environment management and API commands such assail api getandsail api post. These operations are essential for retrieving the data required for security analysis. - [PROMPT_INJECTION]: The skill processes identity attributes and role metadata from the SailPoint environment, creating a surface for indirect prompt injection. (1) Ingestion points: Data fetched from SailPoint endpoints like
/v2025/sod-policiesand/v2025/search. (2) Boundary markers: There are no instructions to use delimiters or specific safety wrappers when processing tenant data. (3) Capability inventory: The skill is restricted to using thesailCLI for API calls and does not perform broad file-system or network operations. (4) Sanitization: No data sanitization is performed on the results returned from the SailPoint API before analysis.
Audit Metadata