using-model-endpoint

Pass

Audited by Gen Agent Trust Hub on Jul 2, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill facilitates legitimate interaction with model endpoints using pre-configured environment variables for authentication. No suspicious data exfiltration or unauthorized network patterns were identified.
  • [SAFE]: The Python implementation in provider.py includes proactive security controls to prevent privilege escalation via environment variable manipulation. It utilizes a strict regular expression and a comprehensive denylist (including variables like LD_PRELOAD, PATH, and proxy settings) to ensure that only safe, non-system environment variables can be aliased.
  • [SAFE]: All third-party dependencies are standard, well-known packages and are pinned with cryptographic hashes in the requirements.lock file to prevent supply chain attacks.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 2, 2026, 01:21 AM
Security Audit — agent-trust-hub — using-model-endpoint