groq-install-auth
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill correctly uses placeholders like
gsk_your_key_hereand provides clear instructions on using.gitignoretemplates to prevent accidental commitment of sensitive API keys in.envfiles. - [EXTERNAL_DOWNLOADS]: The skill downloads the official
groq-sdk(NPM) andgroq(PyPI) packages, which are well-known packages from established registries. - [COMMAND_EXECUTION]: The shell commands provided are standard operations for package installation (
npm install,pip install) and environment variable configuration (export,echo), all correctly restricted by the frontmatter's allowed-tools field. - [DATA_EXFILTRATION]: No network operations to non-whitelisted or suspicious domains were detected. All API endpoints mentioned (
api.groq.com) are official and well-known services associated with the skill's purpose.
Audit Metadata