Skills
Navigate
skills/pspdfkit-labs/nutrient-skills/dws-viewer-api/Gen Agent Trust Hub

dws-viewer-api

Pass

Audited by Gen Agent Trust Hub on Aug 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill demonstrates high security maturity by implementing several hardening measures for cloud API interactions.
  • [CREDENTIALS_UNSAFE]: The skill safely handles the NUTRIENT_DWS_VIEWER_API_KEY by redacting it from any HTTP error responses before logging. It also prevents token leakage by enforcing 0600 permissions on files generated to store session JWTs.
  • [COMMAND_EXECUTION]: Static analysis identified subprocess.run usage in scripts/test_viewer_session.py. This is restricted to local execution of the skill's own CLI tools for testing purposes and does not incorporate unvalidated external input.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes the httpx library to communicate with the official Nutrient API at api.nutrient.io. This is the intended behavior for managing cloud-hosted documents and does not involve the execution of untrusted remote code.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 3, 2026, 04:48 PM
Security Audit — agent-trust-hub — dws-viewer-api