create-list
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use
curlcommands to perform HTTP POST requests. This is the intended mechanism for interacting with the specified API and does not involve arbitrary or dangerous command execution. - [DATA_EXFILTRATION]: The skill sends contact data (name, mobile number, email) to
api.transmitsms.com. This domain is the established API infrastructure for Kudosity, the skill's author. The data transfer is necessary for the skill's primary function of list management and does not target unauthorized external domains or sensitive local configuration files. - [CREDENTIALS_UNSAFE]: The skill correctly references environment variables (
KUDOSITY_API_KEY,KUDOSITY_API_SECRET) for authentication rather than hardcoding secrets. It follows secure practices by instructing the user to configure these credentials via a setup process.
Audit Metadata