abel-auth
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes shell commands to execute a local Python script (
graph_probe.py) for checking authentication status. The command uses a specific path relative to the skill's installation root within the vendor's collection, minimizing risk of unintended execution. - [EXTERNAL_DOWNLOADS]: The skill communicates with official vendor endpoints at
api.abel.aito initiate and complete an OAuth flow. These network operations are functional requirements for obtaining an API key and do not involve untrusted third-party domains. - [CREDENTIALS_UNSAFE]: While the skill handles API keys, it follows standard security practices by instructing the agent to store credentials in a local
.env.skillfile rather than hardcoding them or exposing them in logs. The polling mechanism used for OAuth avoids requiring the user to manually handle or paste raw codes.
Audit Metadata