tako-sdk-js
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill content is restricted to documentation and code examples for a framework, containing no executable scripts or malicious instructions.
- [CREDENTIALS_UNSAFE]: The SDK incorporates a secure proxy for secrets (tako.secrets) that prevents bulk access and redacts values when serialized, promoting safe handling of sensitive credentials.
- [EXTERNAL_DOWNLOADS]: References to external repositories and domains (e.g., tako.sh) are legitimate and point to the author's own infrastructure.
- [SAFE]: The skill defines a framework for processing web requests, which technically introduces an ingestion surface for external data, but this is an inherent and documented feature of the framework rather than a vulnerability.
Audit Metadata