speak-enterprise-rbac
Fail
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The implementation guide contains the URL
https://app.yourschool.com/auth/speak/callbackas a placeholder for SAML and OAuth2 configuration examples. This domain is currently flagged by automated scanners for malicious reputation. Users are advised to replace this with their own verified redirect domains. - [SAFE]: All network operations are directed to
api.speak.com, which is the official API endpoint for the Speak language learning service. - [SAFE]: The skill utilizes environment variables (
SPEAK_API_KEY,SPEAK_APP_ID,SPEAK_OAUTH_CLIENT_SECRET) for secret management, adhering to security best practices for credential handling.
Recommendations
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata