printify-api

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/printify tool utilizes subprocess.run to interact with the macOS Keychain utility (/usr/bin/security). This is used specifically to securely store and retrieve API tokens, which is a recommended alternative to storing credentials in plain-text configuration files.
  • [CREDENTIALS_UNSAFE]: The skill handles Printify API tokens using best practices. It prioritizes environment variables and system keychains for storage. The CLI implementation includes a masking function to prevent full token exposure when the user checks the authentication status.
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to api.printify.com and enterprise.printful.com. These are the official endpoints for the Printify and Printful Enterprise services as described in the skill's documentation.
  • [NO_CODE]: The Python CLI script (scripts/printify) is self-contained and uses only the Python standard library (urllib, json, subprocess), eliminating risks associated with third-party package dependencies.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 03:41 PM