tikhub-endpoint-discovery
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a bundled CLI tool (
bin/tikhub-find-endpoint) and a maintenance script (scripts/build-openapi-index.py) to search and manage its local API index. These operations are contained within the skill's environment and are consistent with its primary purpose of endpoint discovery. - [CREDENTIALS_UNSAFE]: The documentation references the
TIKHUB_API_KEYenvironment variable as a requirement for making actual API calls. Following standard security best practices, the skill does not include hardcoded credentials and instructs the user to manage secrets via environment variables. - [EXTERNAL_DOWNLOADS]: The skill documents how to interact with the TikHub REST API at
api.tikhub.io. Since this domain belongs to the skill's author (TikHub), these references represent expected vendor communication and do not constitute a security risk.
Audit Metadata