salling-food-waste
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a Bun-based CLI tool to perform its primary functions. The commands are scoped to the skill's own source code (
bun run skills/salling-food-waste/cli/src/cli.ts) and use standard argument parsing via the@bunli/coreframework. No arbitrary command execution or shell injection surfaces were found. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to
api.sallinggroup.com, which is the official endpoint for the Salling Group Developer API. This is the intended behavior for fetching food waste data and does not involve downloading or executing external code. - [CREDENTIALS_UNSAFE]: The skill follows security best practices for credential management. It requires the user to set a
SALLING_API_KEYenvironment variable and explicitly checks for its presence before making API calls. No hardcoded secrets or sensitive credentials were found in the source code.
Audit Metadata