auvik-performance

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local Python server script located at mcp-servers/auvik-mcp/auvik_mcp_server.py to process performance data requests.
  • [DATA_EXFILTRATION]: The skill performs network operations to reach Auvik API endpoints (e.g., auvikapi.us1.my.auvik.com) to fetch telemetry data. This behavior is consistent with the skill's documented purpose as a monitoring integration.
  • [SAFE]: Credential management is handled securely through the use of environment variables (AUVIK_USERNAME, AUVIK_API_KEY), which prevents the accidental exposure of secrets in the skill's source code.
  • [SAFE]: While the skill provides an option to disable SSL verification via AUVIK_VERIFY_SSL, it explicitly notes that this practice is "not recommended," providing clear guidance to the user on security best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 04:29 PM
Security Audit — agent-trust-hub — auvik-performance