smp-pm
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: Comprehensive analysis of the instructions, metadata, and evaluation scripts shows no evidence of malicious intent. There are no patterns suggesting prompt injection, data exfiltration, or obfuscation techniques.
- [COMMAND_EXECUTION]: The skill documents the use of the
smpCLI for project management operations. It provides shell snippets that usepython3 -cfor parsing JSON output from the CLI, which is a common and safe practice for data extraction within agent-driven workflows. - [DATA_EXFILTRATION]: All network operations documented in the skill are directed towards the official Simplified PM API (
api.simplified.com). Authentication is managed through environment variables (SMP_TOKEN), following standard security practices for tool authentication without hardcoding secrets.
Audit Metadata