home-depot-search
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
bash,curl, andpython3to facilitate API requests. These are standard system tools used for their intended purpose of network communication and data processing. - [DATA_EXFILTRATION]: The skill communicates with
https://ai-factory.frevana.com. This is a vendor-owned domain associated with the skill's stated purpose of searching Home Depot products via Frevana. No sensitive data beyond the user's search query is transmitted. - [CREDENTIALS_UNSAFE]: The script properly handles the
FREVANA_TOKENby reading it from environment variables or a CLI flag. It includes a specific instruction inSKILL.mdto never echo the token back to the user, which is a security best practice.
Audit Metadata