nyc-hpd
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts exclusively with official New York City Open Data portals (data.cityofnewyork.us) to retrieve public records. No API keys or credentials are required, and no sensitive user data is accessed or transmitted to third parties.
- [EXTERNAL_DOWNLOADS]: The skill uses the WebFetch tool to query JSON data from NYC's Socrata-powered data portal. These are well-known, official government data sources and do not pose a security risk.
- [COMMAND_EXECUTION]: Although the 'Bash' tool is requested in the frontmatter, it is used for standard development tasks (like symlinking during installation) or file operations requested by the user. No suspicious or obfuscated commands were detected.
- [DATA_EXFILTRATION]: No data exfiltration patterns were found. The skill processes property data and displays it to the user or writes it to a local file as requested, without sending information to unauthorized external domains.
Audit Metadata