flag-create
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts with the GrowthBook API via a bundled local script called 'gb-call'. It performs standard operations such as listing feature keys, projects, and environments, and creating new flags via POST requests.
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to run the 'gb-call' script. This script is used for all API communications, and the tool configuration limits execution to this specific bundled helper.
- [SAFE]: The skill manages authentication credentials appropriately by referencing the 'GB_API_KEY' environment variable or a local environment file ('~/.config/growthbook/.env'). This approach aligns with recommended security practices for managing secrets.
Audit Metadata