disco-like
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs legitimate business data retrieval using the official DiscoLike API. It follows standard practices for handling API keys via environment variables and does not attempt to access sensitive system files or credentials.
- [COMMAND_EXECUTION]: The skill executes a local TypeScript script to facilitate API communication and data formatting. This behavior is restricted to the intended business purpose of the tool.
- [DATA_EXFILTRATION]: Network activity is limited to the service's own API domain (api.discolike.com) for data retrieval. No unauthorized data transmission to external or untrusted sources was found.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes external business data, it implements proper CSV escaping for company descriptions and names, minimizing the risk of injection during downstream data processing.
Audit Metadata