skills/getstream/agent-skills/stream/Gen Agent Trust Hub

stream

Pass

Audited by Gen Agent Trust Hub on Nov 13, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references installation scripts for the getstream CLI from the official vendor domain (https://getstream.io/cli.sh and https://getstream.io/cli/beta/install.sh). These resources are used to set up the developer environment for managing Stream projects.
  • [REMOTE_CODE_EXECUTION]: The skill provides instructions to download and execute the vendor's CLI installation scripts using a pipe-to-shell pattern (curl | bash). These operations target the author's own infrastructure and are part of the standard onboarding process for the platform.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill includes extensive documentation and checklists (e.g., integration-review.md) that specifically warn against data exposure. It highlights critical security practices such as ensuring API secrets and user tokens are not bundled in application source code or configuration files.
  • [SAFE]: The skill primarily serves as a routing and documentation hub for various Stream SDKs and platform features. All identified external references and scripts originate from the verified vendor domain (getstream.io), and the skill demonstrates a strong focus on secure integration practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 13, 2026, 05:58 PM