together-prod-checklist
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The validation script accesses the
TOGETHER_API_KEYenvironment variable to verify connectivity. This is standard behavior for an API integration tool, and the documentation explicitly recommends using secrets managers rather than hardcoding credentials. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to
api.together.xyzand referencesdocs.together.ai. These are official domains for Together AI, a well-known service provider. - [COMMAND_EXECUTION]: No suspicious command execution was detected. The YAML frontmatter includes
Bash(pip:*)in theallowed-toolslist, which is a platform-level configuration and does not indicate malicious intent within the skill content.
Audit Metadata