skills/b9b4ymin/midas/har-to-api/Gen Agent Trust Hub

har-to-api

Pass

Audited by Gen Agent Trust Hub on Aug 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The SKILL.md file contains instructions for a one-time setup of the Microsoft Dev Proxy tool on Linux systems. The command bash -c "$(curl -sL https://aka.ms/devproxy/setup.sh)" downloads and executes an installer script from a well-known Microsoft domain.- [COMMAND_EXECUTION]: The skill includes several Python scripts (parse_har.py, discover.py, fetch.py, gen_openapi.py, gen_client.py) designed for local execution by the user to process capture files, discover data paths, and fetch financial metrics.- [SAFE]: The skill implements strong privacy protections for sensitive data. The parse_har.py utility automatically detects and redacts authentication headers such as Authorization, Cookie, and X-API-Key during processing. Furthermore, the skill avoids hardcoded secrets by managing runtime credentials through the HAR2API_AUTH environment variable.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 23, 2026, 01:31 PM
Security Audit — agent-trust-hub — har-to-api