gamma-observability
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides TypeScript and YAML code snippets for instrumentation and monitoring. While these include performing network requests to
https://public-api.gamma.app/v1.0, this is the intended purpose of the Gamma API integration skill. - [DATA_EXFILTRATION]: The instructions include structured logging examples. The skill contains explicit security warnings and code comments (e.g.,
// Never log: apiKey, raw content (may contain PII)) to prevent the accidental exfiltration of sensitive credentials or user data into logs. - [CREDENTIALS_SAFE]: The skill correctly instructs users to manage secrets using environment variables (e.g.,
process.env.GAMMA_API_KEY) rather than hardcoding them in the source code.
Audit Metadata