backlinks-referring-networks

Pass

Audited by Gen Agent Trust Hub on Jul 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses bash and python3 to facilitate API requests. These commands are used for their intended purpose: handling environment variables, parsing JSON, and executing curl to interact with a specific, hardcoded vendor endpoint (https://ai-factory.frevana.com).- [EXTERNAL_DOWNLOADS]: The skill connects to ai-factory.frevana.com. This is a legitimate service domain belonging to the vendor (finpeakinc/frevana) and is the primary purpose of the skill. No untrusted or third-party code is downloaded.- [CREDENTIALS_UNSAFE]: The skill correctly handles sensitive information by requiring a FREVANA_TOKEN from environment variables. The instructions explicitly warn against echoing this token back to the user, following standard secure development practices.- [DATA_EXFILTRATION]: While the skill transmits a target domain and API token to the Frevana API, this is the documented and expected behavior for a backlinks analysis tool. There is no evidence of sensitive local file access or unauthorized data transmission.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 15, 2026, 03:39 PM
Security Audit — agent-trust-hub — backlinks-referring-networks