modelslab-account-management
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and Python code snippets for interacting with the ModelsLab Agent Control Plane API. All network requests are directed to official vendor domains (
modelslab.com) for account management tasks such as signup, login, and API key CRUD. - [CREDENTIALS_SAFE]: While the skill handles sensitive data like passwords and tokens, it provides clear 'Best Practices' documentation advising users to store these in environment variables (e.g.,
os.getenv("MODELSLAB_AGENT_TOKEN")) rather than hardcoding them. The provided snippets use placeholders like<agent_access_token>andsecurepass123in a way that clearly indicates they are examples. - [EXTERNAL_DOWNLOADS]: The skill references the Stripe API (
api.stripe.com) for headless payment method tokenization. This is a well-known, trusted service used for its intended purpose (billing integration), which falls under the trust-scope-rule for well-known services. - [DATA_EXFILTRATION]: There is no evidence of unauthorized data access or exfiltration. The network operations are limited to the account management actions requested by the user/agent (e.g., updating profile, inviting team members) to the vendor's own API.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns or dynamic execution of untrusted code were detected. All code provided consists of static Python functions utilizing the standard
requestslibrary.
Audit Metadata