d6e-workspace-api-client
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides architectural guidance for implementing a secure API proxy layer between a frontend application and the d6e backend. It highlights important security patterns including the use of HTTP-only cookies to protect authentication tokens from client-side access and server-side pinning of sensitive identifiers to prevent cross-workspace data leakage.\n- [DATA_EXFILTRATION]: Documentation details the implementation of functions that handle authentication tokens and perform network requests to external API endpoints. These operations are core to the functionality of an API client and the skill correctly advises using environment variables for configuration.\n- [COMMAND_EXECUTION]: Mentions a local bootstrap script used for workspace initialization. The script implementation uses SHA-256 hashing to ensure operations are idempotent and safe for repeated execution during deployment cycles.
Audit Metadata