fda-database
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses the official and well-known openFDA API endpoint (
https://api.fda.gov) for all data retrieval. This is a trusted government service. - [SAFE]: API keys are handled securely by encouraging the use of environment variables (
FDA_API_KEY) or user-provided parameters, avoiding hardcoded secrets. The usage of placeholders likeYOUR_API_KEYin documentation is standard practice. - [SAFE]: The codebase lacks any dangerous capabilities such as arbitrary command execution, privilege escalation, or persistence mechanisms. All logic is confined to data querying and processing.
- [SAFE]: Local caching is implemented using standard JSON serialization (
json.dumpandjson.load), which does not pose a risk of unsafe deserialization. Files are stored in a localfda_cachedirectory. - [SAFE]: There are no attempts at code or prompt obfuscation. The instructions and scripts are transparent and align perfectly with the stated purpose of analyzing FDA regulatory data.
Audit Metadata