enterprise-installanywhere

Pass

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides templates for using standard command-line utilities including dasel, sort, diff, and shell redirection to analyze and compare XML configuration files.
  • [DATA_EXFILTRATION]: No network operations or access to sensitive user credentials or system files were detected. File operations are restricted to reading the target installer files and writing intermediate results to the /tmp/ directory.
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing untrusted external data (InstallAnywhere .iap_xml files).
  • Ingestion points: Reads external XML files using dasel via the -f flag.
  • Boundary markers: None explicitly defined in the provided command patterns.
  • Capability inventory: Limited to structural XML querying, sorting, and file comparison using dasel, sort, and diff.
  • Sanitization: Relies on the dasel parser to handle XML structure, which minimizes the risk of raw content influencing the agent's logic compared to a full-file read.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 29, 2026, 08:40 AM