backlinks-competitors
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes outbound network requests to
https://ai-factory.frevana.comto retrieve backlink competition data. This is the intended functional purpose of the skill. - [COMMAND_EXECUTION]: Local execution of
bash,python3, andcurlis used to orchestrate the API request. The script specifically uses Python heredocs to safely construct JSON payloads and validate the API's response structure, which helps prevent command injection vulnerabilities. - [CREDENTIALS_UNSAFE]: The skill manages a
FREVANA_TOKENfor authentication. The implementation correctly retrieves this from environment variables or a CLI flag and explicitly instructs the agent not to echo the token back to the user.
Audit Metadata