lindy-prod-checklist
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
Bash(curl:*)to perform synthetic webhook probes against the official Lindy API (public.lindy.ai). This is an intended and documented part of the agent's production validation process. - [EXTERNAL_DOWNLOADS]: Includes official documentation links to
docs.lindy.ai. These are trusted references for configuration guidance. - [CREDENTIALS_UNSAFE]: The skill explicitly instructs users and the agent NOT to store secrets in reports or logs. It provides code examples for secure secret handling using environment variables and constant-time comparison.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns or unsafe piped downloads detected. The bash scripts are static templates for local execution of API requests.
Audit Metadata