guidewire-sdk-patterns
Pass
Audited by Gen Agent Trust Hub on Apr 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides the user to install official development tools from the @guidewire npm scope and use the Guidewire REST API client Gradle plugin.
- Evidence: Installation commands for
@guidewire/jutro-cli@latestand plugin configuration forcom.guidewire.rest-api-clientin references/implementation-guide.md. - [COMMAND_EXECUTION]: Shell commands are used for standard development tasks such as project initialization and SDK code generation using npx and gradle tools.
- Evidence: Commands like
npx jutro-cli generate-sdkandgradletool definitions in SKILL.md and implementation-guide.md. - [CREDENTIALS_UNSAFE]: The implementation examples demonstrate security best practices by using environment variables for sensitive credentials instead of hardcoding them in the source code.
- Evidence: Use of
process.env.REACT_APP_CLIENT_IDandprocess.env.REACT_APP_API_URLin the SDK configuration section of references/implementation-guide.md.
Audit Metadata