rocketchat-send
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto make HTTP requests to a Rocket.Chat instance. This is a standard and expected method for interacting with web APIs in this context. - [CREDENTIALS_SAFE]: The instructions correctly leverage environment variables (
$ROCKETCHAT_AUTH_TOKENand$ROCKETCHAT_USER_ID) for authentication, which prevents the leakage of sensitive credentials within the skill itself. - [DATA_EXPOSURE_AND_EXFILTRATION]: Communication is directed to a host defined by placeholders (
{{ROCKETCHAT_HOST}}), which typically resolves to an internal service or a user-defined instance, posing no inherent risk of unauthorized data exfiltration.
Audit Metadata