tl-openmeter-api-mcp-server
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill uses environment variables (
OPENMETER_API_KEY) to manage authentication tokens, effectively preventing hardcoded credentials from being exposed in the source code or logs. - [EXTERNAL_DOWNLOADS]: All functionality is self-contained within the skill's distribution and its declared dependencies. No remote scripts or unauthorized packages are downloaded or executed during runtime.
- [COMMAND_EXECUTION]: The server is implemented as a Node.js application that performs structured HTTP requests to an API. It does not spawn shell processes or provide the agent with arbitrary command execution capabilities.
- [DATA_EXFILTRATION]: Network activity is confined to the specific
OPENMETER_URLconfigured by the user. There is no evidence of user data or environment information being transmitted to external third-party servers.
Audit Metadata