cihealth-api
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill performs network operations to
cihealth.tools.hcpsvc.osadev.cloudto retrieve CI metrics and patterns. This domain is part of the vendor's development infrastructure and does not involve the transfer of sensitive local data.- [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The skill retrieves text-based build logs fromstorage.googleapis.com. These logs are public artifacts from the CI system. The skill explicitly instructs the user to verify the response content to ensure it is a text artifact.- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external API endpoints and build log files, which could theoretically contain malicious instructions. However, the data sources are trusted CI services and the skill includes basic verification steps. - Ingestion points: REST API responses and log text files.
- Boundary markers: Not explicitly used in the provided instructions.
- Capability inventory: Network retrieval via curl; data parsing via Python.
- Sanitization: Verification that the downloaded artifact is text-based and not an error or HTML response.
Audit Metadata