project-invitation
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security threats or malicious patterns were identified. The skill provides clear instructions for API interactions without executing untrusted code.
- [CREDENTIALS_UNSAFE]: The skill uses environment variables ($SPUREE_ACCESS_TOKEN, $SPUREE_API_KEY) for authentication, adhering to secure secret management practices.
- [INDIRECT_PROMPT_INJECTION]: The skill defines endpoints for retrieving external data (invitation lists). While this introduces an ingestion surface for untrusted project metadata, the skill does not perform any high-privilege operations or unsafe interpolation with the returned data.
Audit Metadata