taapi
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill communicates exclusively with the official API endpoint
https://api.taapi.ioto fetch technical indicators. This is the intended and documented purpose of the skill. - [CREDENTIALS_SAFE]: API keys are managed securely via the
TAAPI_API_KEYenvironment variable, preventing hardcoded secret exposure. - [DATA_EXPOSURE]: Indirect prompt injection risk is minimal. The skill processes external data (API responses), but it lacks dangerous capabilities like arbitrary command execution or file system modification that could be exploited via malicious API payloads.
- [COMMAND_EXECUTION]: The shell usage examples provided in the documentation are benign templates intended for standard execution of the provided Python logic.
Audit Metadata