stream
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill automates the installation of peer skills from the vendor's repository (
GetStream/agent-skills) using thenpx skills addcommand. This mechanism is used to load specialized capabilities for different platforms and tasks as needed, and it targets the official vendor resource. - [COMMAND_EXECUTION]: The skill facilitates the execution of the Stream CLI for API queries and configuration. It enforces a strict 'CLI safety' policy in
RULES.mdthat requires verifying API endpoint shapes against local cache files and using a--safeflag to prevent unintended data mutations. - [SAFE]: The skill includes robust security and stability rules, such as explicitly forbidding the reading of
.envfiles in the chat interface to prevent credential leakage and mandating connection guards to handle React Strict Mode correctly.
Audit Metadata