flag-search
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill manages authentication by reading the
GB_API_KEYfrom~/.config/growthbook/.env, which is a standard and secure practice for this vendor's tooling. - [SAFE]: All network operations are performed through a local helper script that targets the GrowthBook API, ensuring data is only sent to the vendor's official endpoints.
- [SAFE]: The skill is explicitly read-only for all features, mitigating risks of unauthorized data modification.
- [COMMAND_EXECUTION]: The skill uses a platform-restricted tool to execute shell commands for API interaction, which is the expected and intended mechanism for its functionality.
Audit Metadata