discord
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation and boilerplate code for Discord bot development using popular libraries like discord.js and discord.py.
- [CREDENTIALS_SAFE]: The skill correctly demonstrates secure secret management by using
process.env.DISCORD_TOKENandos.environ["DISCORD_BOT_TOKEN"]rather than hardcoding credentials. It also explicitly warns users in the 'Best Practices' section to never store tokens in code. - [DATA_EXFILTRATION]: Network operations (curl and fetch) are used for legitimate purposes—sending deployment notifications to Discord webhooks—and do not access sensitive local files.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data via webhook interactions and slash commands, but it does not execute this data as code or instructions. It provides standard UI components (buttons, select menus) which are safe interfaces for user interaction.
Audit Metadata