procore-local-dev-loop
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The provided Python code example demonstrates the use of
os.environto retrievePROCORE_CLIENT_IDandPROCORE_CLIENT_SECRET. This aligns with industry best practices for secret management by avoiding hardcoded credentials in source code. - [EXTERNAL_DOWNLOADS]: The skill performs network requests to official Procore domains (
login.procore.comandapi.procore.com) to facilitate OAuth2 authentication and data retrieval. These operations are standard for API integrations with well-known services. - [COMMAND_EXECUTION]: While the skill's metadata lists several Bash tools (
npm,pip,curl) as allowed, the actual content of the skill only contains Python code for API interaction and does not invoke any shell commands.
Audit Metadata