agent-match-skill

Pass

Audited by Gen Agent Trust Hub on Jun 25, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill performs lookups of public property agent data from Singapore government sources (data.gov.sg and onemap.gov.sg). All network operations are directed at these authoritative domains for data retrieval.
  • [SAFE]: No sensitive data access or credential exfiltration was detected. The script optionally uses an environment variable (DATA_GOV_SG_API_KEY) to manage API rate limits with government services.
  • [SAFE]: The code does not use any obfuscation or remote script execution. The use of dynamic importing in the test suite is for unit testing purposes and uses static module names.
  • [SAFE]: Local caching is implemented in a standard directory (~/.hermes/cache) to improve performance and adhere to API provider guidelines.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 25, 2026, 04:52 AM
Security Audit — agent-trust-hub — agent-match-skill