commonroom
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill manages authentication through the
COMMONROOM_API_TOKENenvironment variable, which is a standard and secure practice for handling sensitive credentials. - [EXTERNAL_DOWNLOADS]: The skill interacts with
api.commonroom.io, the official API endpoint for the Common Room community management service. This is standard functionality for an integration skill. - [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection as it processes community member data and activity feeds from an external source.
- Ingestion points: External data is ingested via
getMembersandgetActivityForMemberfunctions. - Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present in the documentation.
- Capability inventory: The skill provides data lookup capabilities; no dangerous subprocess calls, dynamic execution, or unauthorized file-write operations were detected.
- Sanitization: The provided documentation does not specify sanitization or filtering logic for the external community content.
Audit Metadata