campaign-flow-builder
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
curlcommands to interact with the official Lytics API endpoint (api.lytics.io). These commands are used for legitimate operations such as retrieving segment data and publishing campaign flow configurations. - [SAFE]: Authentication is handled correctly through the
LYTICS_API_TOKENenvironment variable. The skill does not hardcode credentials or encourage unsafe storage of secrets. - [SAFE]: The skill implements a confirmation-gate pattern (Step 5), which requires the agent to present the final JSON payload and a visual diagram to the user for review and approval before any POST requests are made to the API. This serves as a critical human-in-the-loop control against unintended behavior.
- [SAFE]: All external communication is directed to the vendor's official infrastructure at
lytics.io, conforming to expected behavior for a tool designed for the Lytics platform.
Audit Metadata