portaly-review

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for setting the terminal encoding to UTF-8 (chcp 65001 or $OutputEncoding = [System.Text.Encoding]::UTF8) to ensure non-ASCII characters in handles or localizations are rendered correctly.
  • [DATA_EXPOSURE]: The skill performs an opportunistic version report by sending the PORTALY_API_KEY (if already present in the environment) to https://portaly.ai. This is a standard telemetry and discovery mechanism for the vendor's ecosystem.
  • [SAFE]: The skill implements a security guardrail that prevents the PORTALY_API_HOST environment variable from affecting requests containing authentication tokens. Authenticated requests are hardcoded to the vendor's primary domain to prevent credential exfiltration to unauthorized hosts.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 11:47 AM
Security Audit — agent-trust-hub — portaly-review