cat-kit-http

Pass

Audited by Gen Agent Trust Hub on Apr 23, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the @cat-kit/http package from the official npm registry, which is a standard development practice.
  • [COMMAND_EXECUTION]: Provides standard command-line instructions for installing the library via npm (npm add @cat-kit/http).
  • [DATA_EXFILTRATION]: While the skill documents a tool used for network communication, there is no evidence of unauthorized data collection, hardcoded credentials, or exfiltration patterns. The provided examples use standard API endpoints.
  • [PROMPT_INJECTION]: The instructions are technical and descriptive; they do not contain any attempt to override agent behavior, bypass safety filters, or extract system prompts.
  • [NO_CODE]: The skill consists entirely of Markdown documentation and TypeScript declaration files (.d.ts). No executable logic (Python, JavaScript, or Shell scripts) is included within the skill package itself.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 23, 2026, 02:22 PM
Security Audit — agent-trust-hub — cat-kit-http