create-agent
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to
api.bolna.ai(official vendor endpoint) and defaults toapi.openai.comfor LLM services. These are legitimate operations for the skill's purpose. - [COMMAND_EXECUTION]: The skill includes a Python script (
scripts/create_minimal_agent.py) that uses standard libraries likeargparseandurllibto communicate with the Bolna API. No dangerous command execution or shell injection patterns were found. - [CREDENTIALS_UNSAFE]: The skill correctly instructs users to set the
BOLNA_API_KEYenvironment variable and does not contain hardcoded secrets. It follows best practices for secret management by accessing the key viaos.environ.get("BOLNA_API_KEY").
Audit Metadata