intercom-hello-world
Pass
Audited by Gen Agent Trust Hub on Aug 22, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
intercom-clientnpm package, which is the official SDK for the Intercom platform. - [CREDENTIALS_UNSAFE]: The code snippets correctly utilize
process.env.INTERCOM_ACCESS_TOKENto handle authentication, avoiding the risk of hardcoded credentials. - [DATA_EXPOSURE]: Network operations are scoped to the official Intercom API domain (
api.intercom.io) for legitimate communication purposes. - [INDIRECT_PROMPT_INJECTION]: The skill provides templates for creating messages and contacts; while these fields could potentially carry malicious data in a live environment, the skill itself does not facilitate or implement unsafe processing of untrusted input.
Audit Metadata