xai
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill integrates with the official xAI API (api.x.ai) for various Grok model functionalities including chat, vision, and real-time X search.
- [SAFE]: Sensitive information such as the
XAI_API_KEYis managed appropriately through environment variables or a local configuration file (~/.clawdbot/clawdbot.json), which is a standard and safe practice for CLI tools. - [SAFE]: The
scripts/chat.js,scripts/models.js, andscripts/search-x.jsfiles use the built-in Node.jshttpsmodule to communicate with the official API endpoint. No unauthorized external domains or suspicious network behaviors were detected. - [SAFE]: The skill uses
fs.readFileSyncandpath.resolvefor legitimate purposes such as reading local images for vision tasks or reading the local configuration file. - [SAFE]: No obfuscation, prompt injection, persistence mechanisms, or unauthorized privilege escalation patterns were found in the provided files.
Audit Metadata