setup-api-key
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill includes instructions to download and execute the 'uv' installer script from Astral's official website (
https://astral.sh/uv/install.sh). - [COMMAND_EXECUTION]: The instructions guide the user through installing official vendor tools (
sonilo-cli,sonilo-mcp) and configuring MCP servers usingnpm,pip, anduvx. - [SAFE]: The skill follows security best practices by instructing the agent to avoid requesting API keys in plain text and to redact sensitive credentials when referenced in chat, favoring configuration through environment variables and local files.
Audit Metadata