lark-drive
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill functions as a standard interface for the vendor's business diagnosis service. Technical analysis of the provided files reveals no security violations.
- [EXTERNAL_DOWNLOADS]: The Python runner script communicates with the vendor's official API domain (
ai-skills.ai) to execute the diagnostic tasks. This is the intended behavior and follows secure communication practices using HTTPS. - [COMMAND_EXECUTION]: The included execution script (
scripts/run.py) is used exclusively for API communication and does not contain logic for executing arbitrary system commands or accessing sensitive files. - [CREDENTIALS_UNSAFE]: The skill uses an environment variable (
AISKILLS_API_KEY) for authentication, which is a recommended security practice. No hardcoded secrets or API keys were found in the skill source.
Audit Metadata