skills/craftos-dev/craftbot/xero/Gen Agent Trust Hub

xero

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill documents standard API integration practices for Xero using a third-party gateway (maton.ai). All network operations are directed at the service's official domains (maton.ai, ctrl.maton.ai, gateway.maton.ai).
  • [SAFE]: Environment variable usage for MATON_API_KEY follows security best practices for credential management, avoiding hardcoded secrets.
  • [SAFE]: Python and JavaScript code examples are illustrative and perform basic HTTP requests without obfuscation or dangerous execution patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 01:51 PM
Security Audit — agent-trust-hub — xero