fda-database

Pass

Audited by Gen Agent Trust Hub on Apr 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses the official and well-known openFDA API endpoint (https://api.fda.gov) for all data retrieval. This is a trusted government service.
  • [SAFE]: API keys are handled securely by encouraging the use of environment variables (FDA_API_KEY) or user-provided parameters, avoiding hardcoded secrets. The usage of placeholders like YOUR_API_KEY in documentation is standard practice.
  • [SAFE]: The codebase lacks any dangerous capabilities such as arbitrary command execution, privilege escalation, or persistence mechanisms. All logic is confined to data querying and processing.
  • [SAFE]: Local caching is implemented using standard JSON serialization (json.dump and json.load), which does not pose a risk of unsafe deserialization. Files are stored in a local fda_cache directory.
  • [SAFE]: There are no attempts at code or prompt obfuscation. The instructions and scripts are transparent and align perfectly with the stated purpose of analyzing FDA regulatory data.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 29, 2026, 02:23 AM