aiconfig-targeting
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed to manage feature targeting rules for LaunchDarkly's AI Configs. All network operations are directed at the official LaunchDarkly API domain (app.launchdarkly.com).
- [DATA_EXPOSURE]: The skill provides guidance for the agent to locate LaunchDarkly API keys within environment variables or specific configuration files (e.g., ~/.claude/config.json). This is documented as a prerequisite for the tool's functionality and does not involve transmitting these credentials to any unauthorized third party.
- [COMMAND_EXECUTION]: While the documentation provides examples using
curlcommands, the core implementation is provided in a Python class using therequestslibrary. The use of structured JSON payloads for API requests prevents command injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The Python implementation relies on the standard
requestslibrary for HTTP communication. No untrusted or third-party external scripts are downloaded or executed.
Audit Metadata