using-model-endpoint
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates legitimate interaction with model endpoints using pre-configured environment variables for authentication. No suspicious data exfiltration or unauthorized network patterns were identified.
- [SAFE]: The Python implementation in
provider.pyincludes proactive security controls to prevent privilege escalation via environment variable manipulation. It utilizes a strict regular expression and a comprehensive denylist (including variables likeLD_PRELOAD,PATH, and proxy settings) to ensure that only safe, non-system environment variables can be aliased. - [SAFE]: All third-party dependencies are standard, well-known packages and are pinned with cryptographic hashes in the
requirements.lockfile to prevent supply chain attacks.
Audit Metadata