attio-upgrade-migration

Pass

Audited by Gen Agent Trust Hub on May 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is purely instructional, providing guidance for developers migrating between API versions of a well-known CRM service (Attio).
  • [EXTERNAL_DOWNLOADS]: The skill mentions the community SDK attio-js and provides standard NPM installation commands (npm install attio-js@latest). This is consistent with the skill's stated purpose of assisting with SDK upgrades.
  • [DATA_EXFILTRATION]: All network operations in the code snippets target official Attio domains (api.attio.com, docs.attio.com) or well-known development platforms (GitHub). No sensitive data exfiltration patterns were observed.
  • [CREDENTIALS_UNSAFE]: The skill follows security best practices by referencing environment variables (process.env.ATTIO_API_KEY) rather than hardcoding credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
May 19, 2026, 11:45 PM
Security Audit — agent-trust-hub — attio-upgrade-migration