pipefy-api-fallback
Pass
Audited by Gen Agent Trust Hub on Aug 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Instructions include using curl to perform GraphQL queries and mutations against official vendor endpoints.
- [EXTERNAL_DOWNLOADS]: Fetches data and authentication tokens from official Pipefy domains (api.pipefy.com and app.pipefy.com).
- [SAFE]: Authentication is handled via environment variables (PIPEFY_PAT and PIPEFY_SERVICE_ACCOUNT_CLIENT_SECRET), and the skill explicitly warns against exposing these credentials in logs or responses.
Audit Metadata