kagi-fastgpt
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard wrapper for the Kagi FastGPT API and performs only its documented functions.
- [EXTERNAL_DOWNLOADS]: Fetches pre-built binaries and checksums from the author's repository on GitHub (joelazar/kagi-skills). This is a transparent installation process for a Go-based tool.
- [CREDENTIALS_UNSAFE]: Uses the KAGI_API_KEY environment variable for authentication, following security best practices for credential management.
- [COMMAND_EXECUTION]: A shell script manages the compilation (via go build) or download of the executable. Arguments are passed to the final binary using standard shell execution patterns without unsafe concatenation.
- [DATA_EXFILTRATION]: Communication is limited to the official Kagi API endpoint (kagi.com) and GitHub for updates/installation.
Audit Metadata