enterprise-account-research
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses localized shell scripts (
api.shandsignup.sh) to interact with the OpenFunnel API. This is a standard design for skills requiring authenticated external communication. - [EXTERNAL_DOWNLOADS]: The skill communicates with
api.openfunnel.devfor data retrieval and authentication. As this is the vendor's own infrastructure (openfunnel), it is considered expected behavior for the skill's functionality. - [CREDENTIALS_UNSAFE]: The skill follows security best practices for credential management. It uses a dedicated
signup.shscript to handle authentication and stores keys in a local.envfile that it explicitly adds to.gitignoreto prevent accidental leakage. It instructs the agent to never read or expose these keys directly.
Audit Metadata