skills/cosmix/loom/loom-search/Gen Agent Trust Hub

loom-search

Pass

Audited by Gen Agent Trust Hub on Jul 25, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation, architectural patterns, and code snippets for implementing search functionality, which aligns perfectly with its metadata and purpose.
  • [CREDENTIALS_UNSAFE]: The code examples follow security best practices by referencing environment variables (process.env.ES_API_KEY) for authentication rather than using hardcoded secrets.
  • [EXTERNAL_DOWNLOADS]: No suspicious remote downloads or external script executions were identified. The dependencies mentioned (elasticsearch for Python and @elastic/elasticsearch for Node.js) are standard, well-known libraries.
  • [DATA_EXFILTRATION]: The skill does not perform unauthorized network operations or access sensitive system files. All network operations described are standard search engine API calls.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 25, 2026, 07:34 AM
Security Audit — agent-trust-hub — loom-search