zendesk
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill implements standard API integration patterns and follows platform guidelines for secret management.
- Authenticates securely using
vm0_secretsand environment variables (ZENDESK_API_TOKEN). - Does not contain hardcoded credentials, using placeholders like
your_api_tokenfor documentation purposes. - [COMMAND_EXECUTION]: Employs common system utilities like
curl,jq, andsedto perform legitimate API operations. - Uses
curlfor network requests andjqfor processing JSON responses. - Uses
sedto modify temporary request payloads in/tmp/zendesk_request.jsonbefore submission. - [EXTERNAL_DOWNLOADS]: Network communication is directed exclusively to official service endpoints.
- All API interactions are targeted at
*.zendesk.com, as documented in the skill instructions. - [SAFE]: Indirect prompt injection surface is restricted to processed ticket and user data.
- Ingestion points: Support tickets, user profiles, and search results retrieved from the Zendesk API in
SKILL.md. - Boundary markers: Absent, but operations are limited to standard support workflows.
- Capability inventory: Network access via
curland file manipulation viasedandjqacross all documented examples. - Sanitization: Content is processed as data via
jqfilters.
Audit Metadata