performing-paste-site-monitoring-for-credentials
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves data from official Pastebin and GitHub API endpoints. These are well-known services, and the data retrieval is a core part of the monitoring functionality.
- [CREDENTIALS_UNSAFE]: The scripts contain logic to identify and store leaked credentials such as API keys and tokens. This behavior is intended for threat detection and response workflows.
- [PROMPT_INJECTION]:
- Ingestion points: Untrusted data is downloaded from Pastebin and GitHub Gists in
SKILL.md(Steps 1 and 2). - Boundary markers: None identified.
- Capability inventory: The skill performs network requests and writes alerts to the local file system in
SKILL.md(Step 1). - Sanitization: External content is not sanitized before being processed by regex or saved to local storage.
Audit Metadata