flag-graph
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: Uses the allowed tool
gb-callto interact with GrowthBook's API endpoints for fetching feature and experiment data. - [DATA_EXFILTRATION]: References
~/.config/growthbook/.envas a potential source for theGB_API_KEY, which is a standard configuration pattern for managing service credentials. - [EXTERNAL_DOWNLOADS]: Fetches data from official GrowthBook API endpoints (e.g.,
/api/v2/features,/api/v1/experiments) to build the dependency graph. These references target the vendor's own well-known service.
Audit Metadata