recoup-audience-analysis
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is well-structured and follows industry best practices for a research-oriented tool. Its functionality is clearly documented and matches its stated purpose.
- [COMMAND_EXECUTION]: The skill uses
curlto interact with theapi.recoupable.combackend. All commands are transparent, use standard parameters, and are intended for retrieving artist data, metrics, and insights as part of its primary workflow. - [CREDENTIALS_UNSAFE]: The skill includes a placeholder for an API key (
recoup_sk_...) and describes a legitimate process for users to obtain their own key via the vendor's official signup endpoint. No actual credentials or sensitive environment variables are exposed. - [DATA_EXFILTRATION]: Communication is restricted to the vendor's official API domain (
api.recoupable.com) and well-known music services (Spotify, TikTok, etc.). The skill does not access sensitive local files or directories.
Audit Metadata