sinch-provisioning-api
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices by instructing the agent to use environment variables (e.g.,
SINCH_ACCESS_TOKEN,SINCH_KEY_SECRET) for credential management rather than hardcoding secrets in code or commands. - [SAFE]: All network operations are directed towards the vendor's official API domain (
provisioning.api.sinch.com) and documentation links target trusted vendor sites (developers.sinch.com,dashboard.sinch.com). - [SAFE]: The skill includes explicit defensive instructions for handling asynchronous webhook payloads, requiring the agent to validate and sanitize untrusted content to prevent interpolation into prompts, shell commands, or evaluated code.
- [SAFE]: No obfuscation, dynamic code execution, or unauthorized privilege escalation patterns were detected. The skill relies on standard REST interactions via
curland refers to thesinch-authenticationskill for secure token management.
Audit Metadata