plaud-embedded-mobile-sdk-skill

Pass

Audited by Gen Agent Trust Hub on Jul 25, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides instructions for integrating the Plaud Embedded SDK. All analyzed components align with the stated purpose of mobile development.
  • [CREDENTIALS_SAFE]: Mentions of sensitive keys (CLIENT_ID, CLIENT_SECRET, API_KEY) are handled via placeholders or instructions to retrieve them from a developer portal. The Xcode configuration in project.yml correctly uses environment variables (e.g., $(PLAUD_API_KEY)) rather than hardcoded secrets.
  • [EXTERNAL_DOWNLOADS]: External references point to docs.plaud.ai and github.com/Plaud-AI. These are official resources belonging to the vendor (Plaud-AI) and are considered safe context for this skill.
  • [COMMAND_EXECUTION]: The references/project.yml file contains a postGenCommand using perl. This command performs standard regex-based string substitutions on an Xcode project file to ensure version compatibility. This is a common pattern in project generation tools and does not perform malicious operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 25, 2026, 03:43 PM
Security Audit — agent-trust-hub — plaud-embedded-mobile-sdk-skill