juicebox-common-errors
Fail
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs network requests to api.juicebox.com and api.juicebox.ai to verify API health, authentication status, and project connectivity. These domains are the official endpoints for the Juicebox recruiting platform supported by the skill.
- [COMMAND_EXECUTION]: The skill includes diagnostic commands using curl and a Python script in the references directory to troubleshoot integration issues. These tools correctly instruct the user to provide credentials via the JUICEBOX_API_KEY environment variable, following standard security practices.
- [DATA_EXPOSURE]: The skill instructions explicitly advise users to exclude sensitive data such as credentials and request payloads when creating triage records, demonstrating a focus on data privacy.
Recommendations
- Contains 3 malicious URL(s) - DO NOT USE
Audit Metadata