neta-developer

Pass

Audited by Gen Agent Trust Hub on May 5, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill and its associated assets provide a legitimate developer environment for the Neta Open Platform. Analysis of the instructions and scripts shows adherence to security best practices such as OAuth2 PKCE for authentication and strict Content Security Policy (CSP) headers to prevent unauthorized resource loading.\n- [EXTERNAL_DOWNLOADS]: The demo SPA and CLI tools communicate exclusively with official platform domains (api.talesofai.com, auth.neta.art) and utilize trusted well-known services (cdn.tailwindcss.com) for frontend styling. These interactions are necessary for the skill's functionality and align with its documented purpose.\n- [COMMAND_EXECUTION]: Includes a bash CLI toolkit in the bin/ directory that utilizes standard system utilities like curl and jq for API interaction and JSON processing. The implementation follows best practices, including safe variable handling and error checking.
Audit Metadata
Risk Level
SAFE
Analyzed
May 5, 2026, 06:39 AM
Security Audit — agent-trust-hub — neta-developer