openfda-database

Pass

Audited by Gen Agent Trust Hub on May 19, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches regulatory data from api.fda.gov, which is an official government endpoint and a well-known service.
  • [COMMAND_EXECUTION]: Executes a local Python script (scripts/openfda_query.py) to interface with the openFDA API and save results to local files.
  • [SAFE]: Implements secure credential management by providing the user with a shell command to save the FDA_API_KEY to a local .env file, while explicitly instructing the agent never to read, print, or expose the contents of that file.
  • [SAFE]: The skill ingests data from external API responses but writes them to structured JSON files, reducing the risk of direct context contamination.
Audit Metadata
Risk Level
SAFE
Analyzed
May 19, 2026, 06:50 PM
Security Audit — agent-trust-hub — openfda-database