hunter-salary

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes a local Python script offer.py to perform financial calculations and generate counter-offer scripts. The script relies entirely on the Python standard library and does not execute arbitrary shell commands or process unsanitized user input in an unsafe manner.
  • [EXTERNAL_DOWNLOADS]: The skill interacts with the U.S. Bureau of Labor Statistics (BLS) Public Data API (api.bls.gov) to retrieve official wage benchmarks. This is a well-known government service, and the data fetched is used solely for informational benchmarking.
  • [DATA_EXPOSURE]: Sensitive compensation data is stored and processed locally within the hunter/ directory. The skill does not transmit this data to any third-party services. The handling of API keys via environment variables follows standard security best practices to prevent credential leakage.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided offer details and job posting data. It mitigates injection risks by parsing this data into structured JSON format and validating numeric types within the offer.py logic before interpolating them into generated scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 08:22 PM