recoup-audience-analysis

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is well-structured and follows industry best practices for a research-oriented tool. Its functionality is clearly documented and matches its stated purpose.
  • [COMMAND_EXECUTION]: The skill uses curl to interact with the api.recoupable.com backend. All commands are transparent, use standard parameters, and are intended for retrieving artist data, metrics, and insights as part of its primary workflow.
  • [CREDENTIALS_UNSAFE]: The skill includes a placeholder for an API key (recoup_sk_...) and describes a legitimate process for users to obtain their own key via the vendor's official signup endpoint. No actual credentials or sensitive environment variables are exposed.
  • [DATA_EXFILTRATION]: Communication is restricted to the vendor's official API domain (api.recoupable.com) and well-known music services (Spotify, TikTok, etc.). The skill does not access sensitive local files or directories.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 05:45 PM