mastodon
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto interact with the Mastodon API via shell commands. These operations are restricted to the Mastodon instance URL provided by the user and follow standard API integration patterns. - [DATA_EXFILTRATION]: All network requests are targeted at the
$MASTODON_BASE_URLprovided in the connector configuration. There is no evidence of unauthorized data transfer to third-party domains. - [CREDENTIALS_UNSAFE]: The skill uses environment variables (
$MASTODON_ACCESS_TOKEN) for authentication, which is a secure practice for AI agent skills. No hardcoded secrets or sensitive path accesses were detected. - [PROMPT_INJECTION]: The instructions are focused on task execution and do not contain patterns designed to bypass safety filters or override system instructions.
Audit Metadata