invoke-deployment

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill performs network requests to orq.ai's official API domains (api.orq.ai) to fetch resource configurations and list available entities. These are standard operations for the vendor's integration workflow.
  • [COMMAND_EXECUTION]: The skill uses curl commands within the environment to interact with the orq.ai API for resource discovery and invocation testing. All commands target the vendor's own infrastructure.
  • [SAFE_PRACTICES]: The instructions explicitly forbid hardcoding sensitive credentials (ORQ_API_KEY) and provide templates that use secure methods such as environment variables.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 01:37 PM