airtable

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security vulnerabilities were detected. The skill serves as a legitimate integration for Airtable operations.
  • [CREDENTIALS_UNSAFE]: The skill follows security best practices by instructing users to store their API key in an environment variable and a local .env file rather than hardcoding it. No real credentials are included in the file.
  • [DATA_EXFILTRATION]: All network operations are directed to the official and trusted Airtable API domain (api.airtable.com). No suspicious or unauthorized data transmission patterns were found.
  • [COMMAND_EXECUTION]: The skill uses standard command-line utilities (curl) and Python's built-in modules (json.tool, urllib.parse) for predictable and documented API interactions and data formatting.
  • [INDIRECT_PROMPT_INJECTION]: While the skill ingests data from an external API, it is a standard productivity tool. The risk of processing external content is inherent to its primary purpose and handled through standard tool execution patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 02:43 AM