price-target-summary
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch theoctagon-mcppackage from the official NPM registry during runtime. This is a standard and expected mechanism for MCP-based tools. - [COMMAND_EXECUTION]: Executes the
octagon-mcpserver command locally to provide data to the AI agent. The setup instructions include setting theOCTAGON_API_KEYvia environment variables, which is a secure practice for secret management. - [SAFE]: All referenced URLs point to official Octagon domains (
octagonai.co,octagonagents.com) or trusted repositories (github.com/OctagonAI). No obfuscation, prompt injection, or suspicious network behaviors are present.
Audit Metadata