keyapi-google
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill is designed to facilitate searches and data extraction through the KeyAPI platform using documented REST endpoints.
- [COMMAND_EXECUTION]: The skill includes helper scripts (
configure-keyapi-auth.mjs,search-keyapi-docs.mjs, andkeyapi-api.mjs) to manage local state and API interaction. These scripts use standard Node.js modules and perform operations consistent with the skill's stated purpose. - [CREDENTIALS_UNSAFE]: The
configure-keyapi-auth.mjsscript manages theKEYAPI_TOKENby writing it to shell environment profiles (such as.bashrc,.zshrc, or PowerShell profiles). While this involves modifying sensitive configuration files, it is the intended and standard mechanism for providing persistent authentication for local CLI-based tools. - [EXTERNAL_DOWNLOADS]: The skill interacts with external resources at
api.keyapi.aianddocs.keyapi.ai. These network operations are necessary for fetching live documentation and executing API requests as part of the primary functionality.
Audit Metadata