skills/broomva/skills/gasgo/Gen Agent Trust Hub

gasgo

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches fuel price observations from www.datos.gov.co, which is the official open data portal for the Colombian government. This is a well-known and trusted service for its intended purpose.
  • [CREDENTIALS_UNSAFE]: The implementation correctly handles API tokens by reading them from environment variables (SODA_APP_TOKEN or GASGO_SODA_TOKEN) rather than using hardcoded values. This follows standard security practices for secret management.
  • [DATA_EXFILTRATION]: No sensitive local data access or suspicious outbound network requests were detected. The network traffic is limited to fetching data from the specified government datasets.
  • [SAFE]: The code includes robust input validation for CLI flags and defensive parsing for numerical values from external data (e.g., handling Colombian thousands-dot and comma-decimal formats). Extensive unit tests are provided, covering ranking logic, coordinate resolution, and date parsing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 03:03 PM
Security Audit — agent-trust-hub — gasgo