poke
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents the official Poke SDK and API, providing clear instructions for installation and authentication. All referenced domains (poke.com, npmjs.com) are legitimate and associated with the vendor and standard service providers.
- [SAFE]: Credential management guidelines follow industry standards. The skill correctly identifies that API keys should be stored in environment variables (
POKE_API_KEY) or secure secret managers, and warns against hardcoding secrets. - [SAFE]: The identification of local credential storage at
~/.config/poke/credentials.jsonis standard behavior for developer CLI tools and SDKs to support local development workflows. - [SAFE]: Node.js package dependency (
poke) is the primary library for the skill's intended purpose and is hosted on the official NPM registry.
Audit Metadata