sokosumi
Pass
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines clear security boundaries for authentication, instructing agents to never request passwords or session tokens. It promotes the use of environment variables for API keys and provides canonical URLs (
app.sokosumi.com) for user registration and key management. - [COMMAND_EXECUTION]: The skill uses standard CLI tools (
pnpm,curl) for connectivity checks and repository validation. The instructions explicitly advise against running interactive TUI elements in agentic environments to ensure predictable and secure execution. - [DATA_EXPOSURE]: The skill limits network activity to the service's official API domains (
api.sokosumi.comandapi.preprod.sokosumi.com). It includes a specific guardrail requiring agents to seek user confirmation before transmitting any sensitive, private, or proprietary data to the Sokosumi platform.
Audit Metadata