typefully
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to the official Typefully API (
api.typefully.com) and uses presigned S3 URLs for media uploads. These operations are required for the skill's primary functionality and target legitimate service endpoints. - [COMMAND_EXECUTION]: Includes a CLI script (
scripts/typefully.js) that the agent uses to perform API actions. The script is transparently written, uses only Node.js built-in modules, and has no external dependencies, reducing the risk of supply chain attacks. - [SAFE]: Implements secure API key management by storing credentials in local or user-global configuration files with appropriate permissions. The instructions explicitly direct the agent to wait for user input during setup and forbid searching for keys in unauthorized system locations.
Audit Metadata