modelslab-account-management

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and Python code snippets for interacting with the ModelsLab Agent Control Plane API. All network requests are directed to official vendor domains (modelslab.com) for account management tasks such as signup, login, and API key CRUD.
  • [CREDENTIALS_SAFE]: While the skill handles sensitive data like passwords and tokens, it provides clear 'Best Practices' documentation advising users to store these in environment variables (e.g., os.getenv("MODELSLAB_AGENT_TOKEN")) rather than hardcoding them. The provided snippets use placeholders like <agent_access_token> and securepass123 in a way that clearly indicates they are examples.
  • [EXTERNAL_DOWNLOADS]: The skill references the Stripe API (api.stripe.com) for headless payment method tokenization. This is a well-known, trusted service used for its intended purpose (billing integration), which falls under the trust-scope-rule for well-known services.
  • [DATA_EXFILTRATION]: There is no evidence of unauthorized data access or exfiltration. The network operations are limited to the account management actions requested by the user/agent (e.g., updating profile, inviting team members) to the vendor's own API.
  • [REMOTE_CODE_EXECUTION]: No remote code execution patterns or dynamic execution of untrusted code were detected. All code provided consists of static Python functions utilizing the standard requests library.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 11:10 PM