deepgram-install-auth
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_CONTEXT_INJECTION]: The skill uses dynamic context commands to check the local environment for the
@deepgram/sdkanddeepgram-sdkpackages. These commands (npm listandpip show) are used purely for informational purposes to inform the agent of the current environment state and do not perform any sensitive operations or data exfiltration. - [EXTERNAL_DOWNLOADS]: The skill provides instructions to install standard, well-known libraries from official package registries (NPM and PyPI). Specifically, it references
@deepgram/sdkanddeepgram-sdk, which are the official SDKs for the Deepgram service. - [SAFE]: The skill follows security best practices by explicitly warning against hardcoding API keys and recommending the use of environment variables and
.envfiles (with appropriate .gitignore instructions).
Audit Metadata