find-cpa-firm
Pass
Audited by Gen Agent Trust Hub on May 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious behaviors, prompt injections, or security vulnerabilities were identified. The skill's functionality is strictly limited to querying the ServiceGraph API for B2B catalog data.
- [SAFE]: The instruction to read authentication tokens from environment variables or '.env' files follows standard developer practices for secret management and is documented to facilitate a seamless user experience.
- [COMMAND_EXECUTION]: The skill includes shell command examples (curl) and a Python snippet for ID generation to demonstrate how to interact with the ServiceGraph API. These are provided for instructional purposes and do not represent autonomous execution risks.
- [EXTERNAL_DOWNLOADS]: Network operations are directed towards 'api.servicegraph.co', which is the vendor-owned infrastructure for the skill's data services.
Audit Metadata