inbox-zero-api
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses the official '@inbox-zero/api' Node.js package, which is the expected library for the stated service ('getinboxzero.com').
- [SAFE]: Instructions for handling 'INBOX_ZERO_API_KEY' correctly advise the user to use environment variables or local configuration files rather than hardcoding credentials or passing them as CLI flags.
- [SAFE]: Command execution is limited to the 'inbox-zero-api' utility for standard API operations like schema inspection, rule management, and analytics retrieval.
- [SAFE]: Data processing follows a safe pattern of writing to local workspace files for review before performing API updates.
Audit Metadata