liquid-d1
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation for a legitimate AI service (Liquid AI). All external links and code references point to official domains (
liquid.ai,vercel.com,openrouter.ai) or established developer resources (typesafe.ai). - [COMMAND_EXECUTION]: The skill includes a Python script (
scripts/d1.py) and various CLI examples (curl, pip, npm). These are standard developer tools and demonstration scripts used to interact with the API and do not contain malicious functionality. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill correctly advises users to manage API keys using environment variables (
LIQUID_API_KEY) and server-side code, warning against placing keys in client-side browser code. - [UNVERIFIABLE_DEPENDENCIES]: The documentation references well-known SDKs (
typesafe-sdk,@typesafe-ai/sdk) available via official package registries (PyPI, NPM). References to these tools are standard for this type of integration.
Audit Metadata