asana-api

Pass

Audited by Gen Agent Trust Hub on Jul 1, 2026

Risk Level: SAFE
Full Analysis
  • Asana API Integration: The skill provides comprehensive coverage of the Asana REST API, using curl and jq for interaction. It correctly handles the Asana data envelope and uses gid (Global IDs) for resource referencing as per Asana's standard.
  • Secure Credential Handling: Authentication is managed by the execution environment via the ASANA_TOKEN environment variable. The skill explicitly instructs users not to hardcode or manually refresh tokens, which aligns with best practices for automated agents.
  • Bundled Shell Scripts: The scripts/asana_tasks.sh script is a well-structured Bash script that handles complex operations like offset-based pagination and TSV/JSONL formatting. It includes input validation (e.g., require_int) and clear error handling for API responses.
  • Trusted Environment: The skill is authored by Anthropic and interacts solely with the official Asana domain (app.asana.com). No external downloads or unauthorized remote code executions are present.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 1, 2026, 11:17 PM
Security Audit — agent-trust-hub — asana-api