skills/svix/ai/svix-quickstart/Gen Agent Trust Hub

svix-quickstart

Pass

Audited by Gen Agent Trust Hub on Jul 2, 2026

Risk Level: SAFE
Full Analysis
  • [CREDENTIALS_UNSAFE]: The skill correctly instructs users to store the Svix API key (SVIX_AUTH_TOKEN) as an environment variable and explicitly warns never to hardcode it in the source code.
  • [EXTERNAL_DOWNLOADS]: All external references and documentation links target docs.svix.com and dashboard.svix.com. These are the official domains of the service provider (Svix), making them trusted sources for integration instructions and SDK installation commands.
  • [COMMAND_EXECUTION]: The skill instructs the agent to detect the project's language and run standard package manager commands (like npm install or pip install) to install the official svix SDK. These are routine operations for a developer-oriented setup skill.
  • [SAFE]: The use of the WebFetch tool is restricted to retrieving live documentation from the vendor's own official documentation site to ensure accurate code generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 2, 2026, 08:55 AM
Security Audit — agent-trust-hub — svix-quickstart