jk-vpop

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses the official jinko SDK to interact with the Jinkō platform for scientific modeling and simulation tasks.
  • [SAFE]: No hardcoded credentials, API keys, or secrets were found. The scripts correctly use python-dotenv to load environment variables for authentication.
  • [SAFE]: All write operations in the provided Python scripts (creating or updating project items) are protected by a dry-run mechanism that requires the --apply flag for execution.
  • [SAFE]: Data ingestion from CSV and JSON files is handled using standard Python libraries (csv, json, pandas), with appropriate validation of headers and data structures.
  • [SAFE]: No evidence of obfuscation, remote code execution, or unauthorized network activity was detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 12:22 PM
Security Audit — agent-trust-hub — jk-vpop