portaly-review
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for setting the terminal encoding to UTF-8 (
chcp 65001or$OutputEncoding = [System.Text.Encoding]::UTF8) to ensure non-ASCII characters in handles or localizations are rendered correctly. - [DATA_EXPOSURE]: The skill performs an opportunistic version report by sending the
PORTALY_API_KEY(if already present in the environment) tohttps://portaly.ai. This is a standard telemetry and discovery mechanism for the vendor's ecosystem. - [SAFE]: The skill implements a security guardrail that prevents the
PORTALY_API_HOSTenvironment variable from affecting requests containing authentication tokens. Authenticated requests are hardcoded to the vendor's primary domain to prevent credential exfiltration to unauthorized hosts.
Audit Metadata