portaly-review
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements security best practices by pinning its version-reporting endpoint to the official vendor domain (
https://portaly.ai). This prevents sensitive API keys from being diverted if a user or attacker overrides thePORTALY_API_HOSTenvironment variable. - [SAFE]: No malicious patterns, obfuscation, or unauthorized data exfiltration were detected. The primary function of the skill is to guide the user in generating and placing a standard HTML iframe widget.
Audit Metadata