remofirst-hello-world

Pass

Audited by Gen Agent Trust Hub on Sep 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard documentation and code snippets for interacting with the RemoFirst API. No security risks were identified.
  • [COMMAND_EXECUTION]: The skill declares permissions for npm and curl in its frontmatter, which are standard for developer-oriented skills involving API integrations and package management. No suspicious commands are executed.
  • [DATA_EXPOSURE]: The skill correctly references a prerequisite authentication skill for handling credentials rather than hardcoding them or accessing sensitive system files.
  • [INDIRECT_PROMPT_INJECTION]: The skill has a minimal attack surface; it demonstrates an API client but does not perform unsafe data interpolation or process untrusted external inputs in a way that could influence agent behavior.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 12, 2026, 07:17 PM
Security Audit — agent-trust-hub — remofirst-hello-world