bimface-helper-backend
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill provides documentation for official BIMFACE v3 API endpoints and references vendor-owned resources under the 'bimface.com' and 'glodon.com' domains.
- [NO_CODE]: Analysis of all 147 files confirms the absence of executable scripts (Python, Node.js, Shell, etc.). The skill functions solely as a reference repository for an AI agent to generate valid API requests.
- [SAFE]: The skill provides detailed security guidelines in 'SKILL.md', explicitly forbidding the hardcoding of API credentials (appKey/appSecret) and recommending the use of environment variables and secure token management.
- [SAFE]: Example responses in the documentation use dummy values and consistent placeholders (e.g., 'odatvZYUSAWMbdUjTU8HoZXB9tFt6123') for testing purposes, which do not constitute a credential exposure risk.
Audit Metadata