catalystone
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructional content and configuration metadata for using the CatalystOne HRIS connector through the official Apideck unified API.
- [SAFE]: Authentication is handled using OAuth 2.0 via Apideck Vault, with explicit instructions for the agent to never ask the user for tokens directly, which is a key security best practice.
- [SAFE]: The code examples demonstrate secure secret management by accessing API keys and application IDs through environment variables (
process.env) rather than using hardcoded values. - [SAFE]: All external URLs and network requests target official vendor infrastructure (apideck.com) or the service provider (catalystone.com), consistent with the skill's intended purpose.
- [SAFE]: No patterns associated with prompt injection, obfuscation, privilege escalation, or persistence were detected.
Audit Metadata