flexport-local-dev-loop
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a standard boilerplate for creating a typed HTTP client for the Flexport API, intended for local development and testing.\n- [CREDENTIALS_SAFE]: The skill explicitly advises against hardcoding credentials, recommending the use of a git-ignored
.env.localfile for secret management, which is a standard security practice.\n- [DATA_EXPOSURE]: Network operations are directed to the official Flexport API domain (api.flexport.com) for the purpose of integration, posing no unexpected data exposure risk.\n- [INDIRECT_PROMPT_INJECTION]: The skill defines data structures for ingesting external logistics data.\n - Ingestion points: API response processing in
src/flexport/client.ts.\n - Boundary markers: None (typical for programmatic API wrappers).\n
- Capability inventory: File read/write/edit and restricted bash commands (
npm,pnpm).\n - Sanitization: Standard type-casting to TypeScript interfaces.
Audit Metadata