airtable
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto perform HTTP requests andpython3to handle JSON processing and URL encoding. These are standard utility operations for interacting with a REST API. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill accesses the
AIRTABLE_API_KEYenvironment variable for authentication. All network requests are directed toapi.airtable.com, which is the legitimate endpoint for the service described. - [INDIRECT_PROMPT_INJECTION]: The skill processes data retrieved from external Airtable bases. While this data is untrusted, the skill uses structured JSON processing and explicitly recommends using Python's
urllib.parse.quotefor URL encoding to prevent injection into command parameters. The risk is considered minimal given these precautions.
Audit Metadata