saudi-openbanking
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides
curlcommand templates to interact with financial APIs. These are intended to be used with the user's own credentials to access their financial data. - [EXTERNAL_DOWNLOADS]: The skill references and interacts with official banking and fintech API endpoints. No untrusted external scripts or code are downloaded or executed.
- [DATA_EXFILTRATION]: While the skill involves accessing sensitive financial data (accounts, transactions, identity), all network requests target official, well-known domains associated with the Saudi Central Bank (SAMA), licensed fintech providers (Lean Technologies), and established Saudi banks (Al Rajhi, Alinma, ANB).
- [CREDENTIALS_UNSAFE]: The skill follows security best practices by utilizing environment variables for API tokens (
LEAN_APP_TOKEN,ALRAJHI_TOKEN, etc.) instead of hardcoding sensitive credentials. - [SAFE]: The documentation includes explicit warnings to use sandbox environments and avoid using real personal data during integration testing.
Audit Metadata