recoup-internal-consulting-integration-scaffolder
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to generate and run scripts to verify external API integrations. Security is maintained through explicit requirements for user review, dry-run modes by default, and mandatory authorization for external write operations.- [DATA_EXFILTRATION]: The skill manages sensitive API credentials. It mitigates exfiltration risks by directing the agent to use environment variables instead of chat-based input, enforcing Git ignore rules for token caches, and utilizing a same-origin enforcement check in the bundled Python client template to prevent credential forwarding.- [INDIRECT_PROMPT_INJECTION]: The skill processes external information, such as API documentation, to generate adapters. The risk is minimized by requiring the agent to strictly follow a pre-defined secure template and adhere to internal organizational patterns for data handling.
Audit Metadata