apideck-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSNO_CODE
Full Analysis
- [SAFE]: The skill provides comprehensive security guidelines, such as performing API calls server-side to prevent token leakage and verifying webhook signatures with HMAC-SHA256.
- [SAFE]: Explicitly instructs against hardcoding API keys in source code and recommends using environment variables or secrets managers to handle credentials securely.
- [EXTERNAL_DOWNLOADS]: Mentions official SDKs and packages including @apideck/unify, apideck-unify, and vendor-managed repositories for Go and PHP. These are standard integration dependencies from the verified author.
- [EXTERNAL_DOWNLOADS]: References the vendor's OpenAPI specification hosting (specs.apideck.com) and the portman testing utility on the official vendor GitHub repository.
- [NO_CODE]: The skill consists of documentation and best practices without any accompanying scripts, executables, or automated command execution logic.
Audit Metadata