together-prod-checklist

Pass

Audited by Gen Agent Trust Hub on Sep 10, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE]: The validation script accesses the TOGETHER_API_KEY environment variable to verify connectivity. This is standard behavior for an API integration tool, and the documentation explicitly recommends using secrets managers rather than hardcoding credentials.
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to api.together.xyz and references docs.together.ai. These are official domains for Together AI, a well-known service provider.
  • [COMMAND_EXECUTION]: No suspicious command execution was detected. The YAML frontmatter includes Bash(pip:*) in the allowed-tools list, which is a platform-level configuration and does not indicate malicious intent within the skill content.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 10, 2026, 06:10 PM
Security Audit — agent-trust-hub — together-prod-checklist