terra-vantage
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or security risks were detected. The skill follows standard API integration practices and provides security-conscious guidance for credential management and webhook verification.
- [EXTERNAL_DOWNLOADS]: The skill refers to the installation of the Terra CLI through official channels (NPM and Homebrew). These are trusted resources provided by the skill author (tryterra) for managing the integration.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing external data from the Terra Vantage API.
- Ingestion points: Structured FHIR diagnostic results and JSON webhook payloads retrieved from vantage.tryterra.co.
- Boundary markers: No explicit delimiters are specified in the instructions for these data sources.
- Capability inventory: The skill is scoped to performing authenticated network requests to the vendor's API; it does not include capabilities for arbitrary file-system access or subprocess execution on the ingested data.
- Sanitization: No explicit sanitization steps are defined, though the data is expected in structured formats (FHIR/JSON).
Audit Metadata