sent-integration-starter
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected. The skill provides integration guidance and local utility scripts that operate safely within the local environment.
- [COMMAND_EXECUTION]: The skill includes an offline preflight script (
scripts/preflight.py) to validate integration logic. Analysis of the script confirms it only uses standard libraries for regex and JSON parsing, with no network connectivity or arbitrary command execution capabilities. - [EXTERNAL_DOWNLOADS]: The documentation lists official SDKs for the Sent platform across various language ecosystems. These packages (e.g.,
@sentdm/sentdm,sentdm) are recognized as legitimate vendor resources associated with the author 'sentdm'. - [CREDENTIALS_UNSAFE]: The skill demonstrates best practices for secret management, instructing users to load API keys and webhook secrets from environment variables and explicitly warning against logging sensitive data like keys or payment details.
Audit Metadata