home-depot-search
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to 'ai-factory.frevana.com' to fetch product search data. This domain belongs to the skill's author (finpeakinc), and is used for its intended purpose of providing API access.
- [COMMAND_EXECUTION]: The skill executes a local bash script (
scripts/search_home_depot.sh) which uses standard tools likecurlandpython3. The script properly handles arguments and uses temporary files to prevent shell injection or data leakage. - [CREDENTIALS_UNSAFE]: The skill correctly manages sensitive information by using environment variables (
FREVANA_TOKEN) or explicit command-line flags for authentication. It includes instructions to avoid echoing the token back to the user, following security best practices.
Audit Metadata