mindtickle-install-auth
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses official package managers to install dependencies (
@mindtickle/sdkvia npm and themindticklelibrary via pip). These are standard components for MindTickle integrations. - [CREDENTIALS_UNSAFE]: No hardcoded credentials were found. The skill uses placeholders and correctly guides the user to store secrets in environment variables or a
.envfile, which is a secure practice for local development. - [INDIRECT_PROMPT_INJECTION]: The skill includes code snippets that fetch data from the MindTickle API. This creates a data ingestion surface, though the examples only perform simple logging to verify connectivity.
- Ingestion points: User data retrieved from
client.users.listin SKILL.md. - Boundary markers: No explicit delimiters are used in the verification snippets.
- Capability inventory: The examples are restricted to printing metadata to the console.
- Sanitization: No sanitization is performed on the API output in the verification step.
Audit Metadata