create-list

Pass

Audited by Gen Agent Trust Hub on Jun 18, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use curl commands to perform HTTP POST requests. This is the intended mechanism for interacting with the specified API and does not involve arbitrary or dangerous command execution.
  • [DATA_EXFILTRATION]: The skill sends contact data (name, mobile number, email) to api.transmitsms.com. This domain is the established API infrastructure for Kudosity, the skill's author. The data transfer is necessary for the skill's primary function of list management and does not target unauthorized external domains or sensitive local configuration files.
  • [CREDENTIALS_UNSAFE]: The skill correctly references environment variables (KUDOSITY_API_KEY, KUDOSITY_API_SECRET) for authentication rather than hardcoding secrets. It follows secure practices by instructing the user to configure these credentials via a setup process.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 18, 2026, 04:37 PM
Security Audit — agent-trust-hub — create-list