next-bulk-fulfill
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements secure credential management by instructing the user to store the API token in a local
.envfile and applying restrictive file system permissions (chmod 600) to prevent unauthorized access. - [SAFE]: Network security is prioritized in the execution logic. The provided Python script includes a custom
AuthenticatedRedirectHandlerto prevent the API token from being leaked via redirects to external hosts and performs strict domain validation on all API requests and pagination links. - [SAFE]: The skill minimizes supply chain risks by relying exclusively on the Python standard library for its execution scripts, avoiding external package dependencies.
- [SAFE]: Data integrity and privacy controls are built into the tool, including rate-limiting to respect API quotas, durable journaling to prevent duplicate fulfillments during failures, and explicit redaction of customer PII from results and log files.
Audit Metadata