listingsapi-performance-reporting
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows established security practices for handling authentication. It specifically instructs the agent to use standard Authorization headers for the ListingsAPI service and emphasizes that credentials must be kept out of prompts, reports, and logs.
- [DATA_EXFILTRATION]: The skill interacts exclusively with the
listingsapi.comdomain, which belongs to the verified skill author (listings-api). These network operations represent the core functionality of the skill and do not involve unauthorized data transfer. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external publishers (Google, Facebook, Bing). While processing external data is an inherent attack surface, the skill is restricted to read-only reporting, and the instructions provide robust guidelines for data validation and handling missing values, which mitigates the risk of processing malicious inputs.
Audit Metadata