configs-targeting
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill provides instructions for the agent to locate API tokens within environment variables (e.g., LAUNCHDARKLY_API_KEY) and the local configuration file
~/.claude/config.json. These credentials are used for authenticating requests to the LaunchDarkly API. - [COMMAND_EXECUTION]: The documentation includes
curlcommand templates for inspecting and modifying targeting rules directly from the shell. - [EXTERNAL_DOWNLOADS]: The Python implementation utilizes the standard
requestslibrary to perform HTTP communication with the LaunchDarkly API. - [PROMPT_INJECTION]: The skill processes data from the LaunchDarkly API to determine available variations and UUIDs, which influences subsequent automated actions.
- Ingestion points: Data returned from GET requests to
app.launchdarkly.com(SKILL.md). - Boundary markers: Absent.
- Capability inventory: Ability to modify environment targeting rules via PATCH requests (SKILL.md).
- Sanitization: Absent; the skill passes configuration parameters directly to the API request logic.
Audit Metadata