design-website
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill accesses
token.jsonandcredentials.jsonto authenticate with Google Sheets, and reads an Unsplash API key from environment variables. These operations are necessary for the skill's primary functionality and follow standard API integration patterns. - [COMMAND_EXECUTION]: The skill uses the Bash tool to run internal Python scripts for data processing and HTML generation. Input handling includes slugification and escaping to prevent command injection or path traversal issues.
- [EXTERNAL_DOWNLOADS]: The skill connects to well-known services including the Google Sheets API and Unsplash API. It also references Google Fonts via standard CDNs in the generated HTML.
- [SAFE]: The skill performs expected behaviors for its stated purpose of designing websites from prospect data, with no signs of malicious activity or data exfiltration.
Audit Metadata