endpoint-creator
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill interacts with the platform via the
dxsCLI, performing operations such asdxs endpoint add,update, andremove. These are the primary intended functions of the skill and target the vendor's own infrastructure. - [SAFE]: A validation gate is implemented in Phase 1 that checks the application type (
isApiApplication) usingdxs source branch showbefore allowing any endpoint operations to proceed. - [SAFE]: The skill enforces a mandatory user confirmation step before performing modifications or removals that could break external consumers, mitigating the risk of accidental data or service loss.
- [SAFE]: Input validation is defined for endpoint aliases using a strict regular expression to ensure they conform to naming standards and prevent potential command injection or malformed path issues.
Audit Metadata