juicebox-install-auth
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the official Juicebox SDKs using standard package managers (npm install @juicebox/sdk, pip install juicebox-sdk). These are legitimate vendor resources.
- [CREDENTIALS_UNSAFE]: Correctly advises using environment variables and .env files for secret management. The instructions specifically command the agent to never include API keys or contact data in its output.
- [INDIRECT_PROMPT_INJECTION]: While the skill is designed to interface with professional profile data, it implements a 'redacted authentication receipt' pattern to prevent leaking sensitive data into the conversation context.
Audit Metadata