recoup-content-make-graphics

Pass

Audited by Gen Agent Trust Hub on Jul 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements secure credential management by using environment variables (RECOUP_API_KEY, RECOUP_ACCESS_TOKEN) and providing explicit instructions for their use, avoiding any hardcoded secrets.
  • [SAFE]: Network operations are correctly scoped to the vendor's official API domains (api.recoupable.dev) and documentation sites (docs.recoupable.dev).
  • [SAFE]: The Stop hook in the frontmatter acts as a quality guardrail, requiring the agent to perform a validation check on generated assets before declaring them finished. This is an internal quality control mechanism and does not attempt to bypass safety filters or conceal malicious activity.
  • [SAFE]: All command-line examples use standard, legitimate utilities such as curl, jq, sed, and tr for interacting with the platform's API and processing data.
  • [SAFE]: The skill maintains clear workspace boundaries, restricting file access and generation to artist-specific directories (artists/{slug}/) and standardized subfolders.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 23, 2026, 08:24 AM
Security Audit — agent-trust-hub — recoup-content-make-graphics