turbodocx-sdk
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or safety bypass instructions were detected in the skill files or documentation references.
- [EXTERNAL_DOWNLOADS]: The skill facilitates downloading the official TurboDocx SDKs from well-known package registries such as npm, PyPI, Maven Central, Packagist, and RubyGems. All download sources align with the official identity of the vendor.
- [COMMAND_EXECUTION]: Uses system shell commands to perform legitimate software development tasks, specifically installing dependencies using standard package managers. The commands are consistent with the skill's stated purpose of setting up a development environment.
- [DATA_EXFILTRATION]: Handles API keys and other credentials by guiding the user to use .env files. It explicitly recommends adding these files to .gitignore to prevent accidental credential leakage to version control systems, which is a security best practice.
Audit Metadata