keyapi-google

Pass

Audited by Gen Agent Trust Hub on Jul 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill is designed to facilitate searches and data extraction through the KeyAPI platform using documented REST endpoints.
  • [COMMAND_EXECUTION]: The skill includes helper scripts (configure-keyapi-auth.mjs, search-keyapi-docs.mjs, and keyapi-api.mjs) to manage local state and API interaction. These scripts use standard Node.js modules and perform operations consistent with the skill's stated purpose.
  • [CREDENTIALS_UNSAFE]: The configure-keyapi-auth.mjs script manages the KEYAPI_TOKEN by writing it to shell environment profiles (such as .bashrc, .zshrc, or PowerShell profiles). While this involves modifying sensitive configuration files, it is the intended and standard mechanism for providing persistent authentication for local CLI-based tools.
  • [EXTERNAL_DOWNLOADS]: The skill interacts with external resources at api.keyapi.ai and docs.keyapi.ai. These network operations are necessary for fetching live documentation and executing API requests as part of the primary functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 14, 2026, 09:25 AM
Security Audit — agent-trust-hub — keyapi-google