retellai-security-basics
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation on secure credential management, including the use of environment variables and
.gitignoreto prevent secret leakage. - [SAFE]: Instructions for secret rotation utilize official vendor endpoints (
api.retellai.com) for health checks. - [SAFE]: The skill uses well-known and official libraries, such as the
retell-sdkfor Node.js and the built-incryptomodule for cryptographic operations. - [SAFE]: Security implementation patterns, such as timing-safe equality checks for webhook signatures and audit logging, follow security best practices.
Audit Metadata