ifttt-connect
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Secret management is handled correctly by requiring the IFTTT Webhook key via environment variables.
- [SAFE]: Robust input validation using Zod ensures that event names and payloads are sanitized, preventing injection or path traversal.
- [SAFE]: The skill implements a custom logger that automatically redacts sensitive patterns like API keys, emails, and IP addresses.
- [SAFE]: A built-in token-bucket rate limiter protects against excessive requests and potential abuse.
- [SAFE]: External network communication is restricted to the legitimate IFTTT API service as intended by the skill's purpose.
Audit Metadata