skills/mukul975/anthropic-cybersecurity-skills/implementing-soar-playbook-with-palo-alto-xsoar/Gen Agent Trust Hub
implementing-soar-playbook-with-palo-alto-xsoar
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary purpose is to provide automation and documentation for Cortex XSOAR. The provided Python scripts and markdown files contain no malicious logic or hidden commands.
- [CREDENTIALS_UNSAFE]: The skill correctly implements security best practices by requiring sensitive credentials (XSOAR API Key) to be provided through environment variables rather than being hardcoded in the scripts.
- [DATA_EXFILTRATION]: While the script performs network operations to an external URL, this is the intended functionality (communicating with the user's XSOAR instance). The destination URL is controlled by the user via the
XSOAR_URLenvironment variable. - [EXTERNAL_DOWNLOADS]: The skill identifies a dependency on the
requestslibrary, which is a standard and well-known Python package for HTTP communication.
Audit Metadata