guidewire-core-workflow-a
Facilitates policy lifecycle management in Guidewire's PolicyCenter, enabling quoting, binding, issuing, and renewing insurance policies.
Install this skill
Security score
The guidewire-core-workflow-a skill was audited on May 12, 2026 and we found 9 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 48 | const res = await fetch(`${BASE}/pc/rest/v1/accounts`, { |
Template literal with variable interpolation in command context
| 50 | headers: { Authorization: `Bearer ${await getToken()}`, "Content-Type": "application/json", "Idempotency-Key": idempotencyKey }, |
Template literal with variable interpolation in command context
| 76 | const quoted = await fetch(`${BASE}/pc/rest/v1/jobs/${submission.attributes.id}/quote`, { |
Template literal with variable interpolation in command context
| 78 | headers: { Authorization: `Bearer ${await getToken()}`, "Idempotency-Key": idempotencyKey }, |
Template literal with variable interpolation in command context
| 108 | const issued = await fetch(`${BASE}/pc/rest/v1/policies/${bound.attributes.policy.id}/issue`, { |
Template literal with variable interpolation in command context
| 110 | headers: { Authorization: `Bearer ${await getToken()}`, "Idempotency-Key": idempotencyKey }, |
Template literal with variable interpolation in command context
| 134 | const policy = await fetch(`${BASE}/pc/rest/v1/policies/${policyId}`).then(r => r.json()); |
Template literal with variable interpolation in command context
| 138 | const renewalJob = await fetch(`${BASE}/pc/rest/v1/policies/${policyId}/renew`, { method: "POST" }); |
Webhook reference - potential data exfiltration
| 209 | - `guidewire-webhooks-integrations` — listening to App Events that fire on bind, issue, and renewal transitions |