backlinks-bulk-ranks

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses FREVANA_TOKEN from the environment and explicitly warns against echoing the token back to the user, following standard security practices for credential handling.
  • [SAFE]: All network operations are directed to the vendor's own domain (ai-factory.frevana.com). The script includes appropriate timeouts (--connect-timeout 10, --max-time 600) to prevent resource exhaustion.
  • [SAFE]: The execution flow utilizes an embedded Python script to perform rigorous validation and serialization of inputs before they are sent to the API, mitigating risks of malformed payloads or injection in the HTTP request.
  • [SAFE]: The script uses mktemp for temporary files and implements a trap for cleanup, ensuring that potentially sensitive intermediate data (like request payloads) is removed from the disk upon completion or failure.
  • [SAFE]: The final API response is validated as JSON before being output or saved, preventing the processing of unexpected or malicious non-JSON content.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 03:39 PM
Security Audit — agent-trust-hub — backlinks-bulk-ranks