metronome-commit-health
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected. The skill's behavior is entirely consistent with its stated purpose of providing financial analytics for the Metronome billing service.
- [EXTERNAL_DOWNLOADS]: The skill interacts with
api.metronome.comandstaging.api.metronome.com. These are legitimate, well-known service domains associated with the skill's author, Metronome-Industries, and are used to fetch the necessary data for its analysis functions. - [CREDENTIALS_UNSAFE]: The skill correctly instructs the agent to use the
$METRONOME_API_TOKENenvironment variable for authentication. This avoids the risk of hardcoded secrets and ensures that credentials are managed securely by the host environment. - [COMMAND_EXECUTION]: All technical operations are limited to structured HTTP API requests. There are no instructions that involve executing shell commands, system scripts, or arbitrary code.
Audit Metadata