steedos-server-api
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The documentation describes the REST API architecture for the Steedos Server. It does not include executable code, external scripts, or requests for elevated permissions.
- [PROMPT_INJECTION]: The content is purely informational. It does not contain instructions that attempt to override the AI's safety guidelines, bypass constraints, or exfiltrate the system prompt.
- [CREDENTIALS_SAFE]: The authentication section describes how to use Bearer tokens and cookies for API access but does not include any hardcoded secrets or sensitive credentials. The examples use standard placeholders like ''.
- [DATA_EXPOSURE]: There is no access to sensitive local file paths (such as .ssh or .aws) or instructions to exfiltrate user data to external domains.
Audit Metadata