atai-task-verification-agent
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The provided Python script
run_tva_agent.pyis a utility for interacting with the Archetype AI API. It does not execute arbitrary shell commands or user-supplied code. - [EXTERNAL_DOWNLOADS]: The skill communicates with official vendor endpoints (
*.archetypeai.app) and references vendor-controlled GitHub repositories (github.com/archetypeai/*). These are recognized as trusted vendor resources. - [CREDENTIALS_UNSAFE]: The skill correctly handles API keys by instructing users to use a
.envfile and providing a template. No hardcoded credentials were found. - [DATA_EXFILTRATION]: Data transmission is limited to the official vendor API for the purpose of the skill's functionality. No sensitive local files (like SSH keys or AWS credentials) are accessed or sent externally.
- [NO_CODE]: The skill includes a standalone Python utility script, which is well-documented and follows security best practices, such as avoiding third-party dependencies and providing offline scoring capabilities.
Audit Metadata