api-gateway
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates as a passthrough proxy for third-party APIs. All identified network requests and script executions are consistent with its documented purpose of facilitating API interactions.
- [COMMAND_EXECUTION]: The documentation includes Python script examples that the agent is expected to execute via the shell to perform HTTP requests. These scripts use standard libraries to communicate with the documented gateway endpoints and do not contain malicious payloads.
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to interact with
gateway.maton.aiandctrl.maton.ai. These domains are vendor-owned resources necessary for the gateway's functionality and connection management. - [CREDENTIALS_UNSAFE]: The skill uses a
MATON_API_KEYfor authentication. The documentation correctly instructs the user to store this sensitive information in environment variables rather than hardcoding it, which aligns with security best practices.
Audit Metadata