google-devdocs
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlandjqwithin a shell environment to interact with the Google Developer Knowledge API. This is the intended primary purpose of the skill and follows standard development workflows. - [DATA_EXFILTRATION]: Network requests are strictly targeted at
developerknowledge.googleapis.com. According to security guidelines, interaction with this well-known Google service is considered safe and appropriate for documentation retrieval. - [CREDENTIALS_UNSAFE]: The skill correctly instructs the user to provide an API key via an environment variable (
GOOGLE_DEVKNOWLEDGE_API_KEY) and explicitly warns against hardcoding secrets or attempting calls without the variable set. This aligns with secret management best practices.
Audit Metadata