dog-intelligence
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is strictly read-only and designed for data retrieval. It does not perform any sensitive operations such as file writing, command execution, or transaction signing.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external API endpoints at
https://www.dogdata.xyz/api(documented indog-intelligence.ts). While this represents a data ingestion surface, the risk is mitigated by the skill's lack of actionable capabilities (no write/execute permissions) and the requirement for strict JSON output envelopes defined inAGENT.md. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to
dogdata.xyzto retrieve analytics. This is the primary intended functionality of the skill and uses standard HTTP GET requests with optional API key authentication via environment variables. - [CREDENTIALS_SAFE]: The skill uses an environment variable
DOGDATA_API_KEYfor authentication, which is a standard and secure practice. It includes explicit instructions inAGENT.mdfor the agent to mask this key in any output.
Audit Metadata