google-ai-mode
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a bash script to handle request logic and a Python script to validate input types and structure. These operations are restricted to the local environment for the purpose of the skill's primary function.
- [EXTERNAL_DOWNLOADS]: The skill performs an outbound network request using
curltoai-factory.frevana.comto fetch search results. This is the core functionality described in the documentation and targets the vendor's own infrastructure. - [CREDENTIALS_SAFE]: The skill handles authentication via the
FREVANA_TOKENenvironment variable or an explicit--tokenflag. It does not hardcode credentials and appropriately prompts for input if the token is missing in an interactive session. - [DYNAMIC_EXECUTION]: Python is used as a sub-process to securely parse and validate JSON payloads, avoiding unsafe evaluation of user input.
Audit Metadata