localize-campaign
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements standard integration with the sync.so API. All network operations (REST API calls) target official vendor endpoints (
api.sync.so,mcp.sync.so). - [SAFE]: Credential management instructions follow security best practices by recommending the use of environment variables (
SYNC_API_KEY) and explicitly advising against printing or committing keys to logs or chat. - [SAFE]: Tool and MCP usage is scoped to legitimate media processing tasks (dubbing, translation, cost estimation) using the vendor's provided tools.
- [SAFE]: No obfuscation, persistence mechanisms, or unauthorized privilege escalation attempts were detected. The use of shell commands (curl, ffprobe) is limited to standard media handling and API interaction as documented in the vendor's reference files.
Audit Metadata