recoup-platform-connect-account
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto perform status checks and verify API keys against the vendor's API endpoint atapi.recoupable.dev. - [PERSISTENCE]: The skill establishes persistence by offering to modify the user's shell configuration files to source environment variables and by appending connection metadata to
~/.claude/CLAUDE.mdto guide future agent sessions. - [DATA_EXPOSURE]: The skill manages a
RECOUP_API_KEY. It explicitly mandates security best practices, including setting restricted file permissions (chmod 600) and prohibiting the agent from echoing the key in its output.
Audit Metadata