itential-automation
Pass
Audited by Gen Agent Trust Hub on Mar 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
itential-mcpPython package and its dependencies, includingfastmcp,ipsdk,python-toon, andwsproto, from public package registries to enable communication with the Itential platform. - [COMMAND_EXECUTION]: Provides tools such as
run_command,run_service, andapply_device_configurationwhich allow the agent to perform CLI operations and configuration deployments on managed network infrastructure as part of its automation workflow. - [CREDENTIALS_UNSAFE]: Relies on environment variables
ITENTIAL_MCP_PLATFORM_USERandITENTIAL_MCP_PLATFORM_PASSWORDto authenticate with the remote platform, which is a standard configuration method for such integrations. - [PROMPT_INJECTION]: Contains an indirect prompt injection surface through tools that ingest external structured data. Ingestion points:
templateparameter inrender_template(Jinja2) andopenapi_specincreate_integration_model. Boundary markers: None identified in the skill definition. Capability inventory: High-privilege actions includingrun_commandandapply_device_configuration. Sanitization: No specific input validation or sanitization logic is described in the skill documentation.
Audit Metadata