api-tester
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
python3 -ccommands to parse the local JSON configuration file andcurlto interact with API endpoints. These commands are used for legitimate configuration management and testing purposes. - [CREDENTIALS_UNSAFE]: Instructions describe reading an API key from
~/.gooseworks/credentials.json. This file is part of the vendor's own configuration environment, and its use is intended for authenticating with the vendor's official API endpoint (api.gooseworks.ai). - [DATA_EXFILTRATION]: The skill performs network operations to the vendor's domain and various third-party documentation and API sites (e.g., Stripe, OpenAI). These network requests are necessary for the skill's primary function of testing and documenting API endpoints and do not involve unauthorized data transmission.
Audit Metadata