setup-api-key
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a Python script (
scripts/verify_key.py) andcurlcommand examples intended to verify theBOLNA_API_KEYby querying the official Bolna API (api.bolna.ai/user/me). This is a legitimate diagnostic function for the vendor's services. - [CREDENTIALS_UNSAFE]: The documentation provides guidance on managing the
BOLNA_API_KEYusing environment variables and.envfiles. It explicitly instructs users to add these files to.gitignoreto prevent accidental credential leakage to version control systems.
Audit Metadata