hunter-salary
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local Python script
offer.pyto perform financial calculations and generate counter-offer scripts. The script relies entirely on the Python standard library and does not execute arbitrary shell commands or process unsanitized user input in an unsafe manner. - [EXTERNAL_DOWNLOADS]: The skill interacts with the U.S. Bureau of Labor Statistics (BLS) Public Data API (
api.bls.gov) to retrieve official wage benchmarks. This is a well-known government service, and the data fetched is used solely for informational benchmarking. - [DATA_EXPOSURE]: Sensitive compensation data is stored and processed locally within the
hunter/directory. The skill does not transmit this data to any third-party services. The handling of API keys via environment variables follows standard security best practices to prevent credential leakage. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided offer details and job posting data. It mitigates injection risks by parsing this data into structured JSON format and validating numeric types within the
offer.pylogic before interpolating them into generated scripts.
Audit Metadata