gamma-local-dev-loop
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard boilerplate code and instructions for interacting with the Gamma REST API. All identified behaviors, such as local server execution and HTTP requests to the official Gamma API domain, align with the skill's stated purpose of setting up a local development loop.
- [SAFE]: Secret management practices are handled securely. The instructions explicitly recommend using
.envfiles for theGAMMA_API_KEYand ensure that sensitive files are gitignored in the project structure. There are no hardcoded credentials or secrets present in the skill. - [SAFE]: Command execution is limited to standard Node.js development tools such as
npmandtsxfor running local scripts and tests. The network operations target the official API endpointpublic-api.gamma.app, which is consistent with the vendor's service.
Audit Metadata