groq-hello-world

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill follows security best practices by instructing users to store sensitive credentials like GROQ_API_KEY in environment variables rather than hardcoding them.
  • [EXTERNAL_DOWNLOADS]: The skill references standard package installations (npm install groq-sdk and the groq Python package) for interacting with Groq's official services. These are well-known resources from a recognized AI service provider.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides templates for chat completion interfaces which process external input.
  • Ingestion points: User prompt content processed via the messages array in SKILL.md and references/examples.md.
  • Boundary markers: Standard message object structure is used.
  • Capability inventory: The skill utilizes Read, Write, and Edit tools for file management and example verification.
  • Sanitization: The skill uses the official SDKs which are the standard way to interact with these APIs.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:45 AM