busa-creators
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a gated-write architecture. The AI agent drafts outreach messages, campaign briefs, and contracts to a Busabase database, but the actual execution of these actions (sending emails or DMs) is explicitly delegated to other specialized skills only after a human operator provides approval.
- [SAFE]: Data persistence is handled via the
busabase-sdk, a structured backend service. Communication with this service uses standard API calls and respects workspace permissions defined in the configuration. - [SAFE]: The skill includes trusted maintenance scripts for setup and deployment. These scripts utilize environment variables for authentication, which is a standard and secure practice for local development tools.
- [SAFE]: UI components for the companion web application use proper output encoding (
escapeHtml) to prevent cross-site scripting (XSS) when rendering data stored in the database. - [SAFE]: The skill contains a 'content-reviewer' quality gate that specifically checks for FTC disclosures and claim authenticity, demonstrating a focus on regulatory compliance and safety.
Audit Metadata