next-bulk-move
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements robust security practices for managing sensitive Admin API tokens. It instructs the user to store credentials in a local
.envfile with restricted permissions (chmod 600), ensuring the token never enters the chat history or logs. - [DATA_EXFILTRATION]: The provided Python script (
scripts/bulk_move.py) includes specific security controls to prevent credential leakage. It uses a custom HTTP handler to block authenticated redirects to foreign domains and validates that API requests stay within the authorized store subdomain or a manually approved host. - [COMMAND_EXECUTION]: The skill uses a local Python utility script that relies exclusively on the Python Standard Library. It does not require or install third-party packages, minimizing supply chain risks.
- [SAFE]: The execution logic is well-tested and includes a mandatory 'dry run' phase before any modifications are made to the live store data. It also validates the state of each order immediately before performing an action to prevent errors due to stale information.
Audit Metadata