tres-export-3rd-party-contacts
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Python Package Management: The skill instructs the user to install
openpyxl==3.1.5for generating Excel workbooks. It follows security best practices by suggesting the use of a virtual environment (.venv) and pinning a specific, well-known version of the library to ensure consistency and minimize risks from dependency updates. - MCP Tool Integration: The workflow relies on the
user-tres-financeMCP server'sexecutetool to interact with the TRES Finance GraphQL API. This is an expected and controlled method for data retrieval within the agent's environment. - Shell Command Usage: The skill includes a pre-formatted command for the user to manually install necessary dependencies if they are missing. This is presented as an informative prompt rather than an automated background execution, maintaining user oversight.
Audit Metadata