find-companies-hiring-to-solve-specific-problems

Pass

Audited by Gen Agent Trust Hub on Apr 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local shell scripts (api.sh and signup.sh) to interact with the OpenFunnel API. These scripts are used for authentication and data retrieval, which is standard for this type of integration.
  • [EXTERNAL_DOWNLOADS]: The skill communicates with the vendor's official API endpoint (api.openfunnel.dev) using curl. This is the intended behavior for the skill's functionality and targets the author's own infrastructure.
  • [CREDENTIALS_UNSAFE]: The skill implements a secure credential management system. It uses a signup and verification flow to obtain an API key, which it then stores in a local .env file. It specifically instructs the agent to never read or expose these credentials directly and automatically adds the .env file to .gitignore to prevent accidental exposure in version control.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 15, 2026, 09:32 PM
Security Audit — agent-trust-hub — find-companies-hiring-to-solve-specific-problems