ielts-writing-review
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documents the use of a local Python script
scripts/ielts_buddy_api.pyto interact with the IELTS Buddy API. These commands are for capability discovery and data retrieval as intended by the skill's purpose. - [EXTERNAL_DOWNLOADS]: The skill's manifest references a repository at
https://github.com/Jobo16/ielts-buddy, which is the primary source for the skill's code. This is a standard repository reference. - [DATA_EXFILTRATION]: While the skill transmits data to
https://work.ieltsbuddy.igopx.cn/api/v1/agent, this is the official API endpoint for the service described. The documentation explicitly warns against outputting tokens and specifies using theIELTS_BUDDY_TOKENenvironment variable for security. - [NO_CODE]: The skill's core logic is contained in the referenced
scripts/ielts_buddy_api.py(not provided in the snippet), but the documentation describes standard API client behavior.
Audit Metadata