kick-platform
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and code examples for integrating with the Kick platform. No malicious instructions or hidden behaviors were detected.
- [SAFE]: Authentication examples correctly use placeholders (e.g.,
YOUR_CLIENT_ID,YOUR_CLIENT_SECRET) and advocate for secure practices like OAuth 2.1 with PKCE (Proof Key for Code Exchange). - [SAFE]: Webhook implementation guidance includes clear instructions and code snippets (in Go and TypeScript) for verifying RSA signatures using Kick's public key, which is a critical security best practice.
- [SAFE]: All network endpoints documented (e.g.,
id.kick.com,api.kick.com) are official domains for the Kick streaming service. - [SAFE]: No obfuscation, unauthorized privilege escalation, or data exfiltration patterns were found within the instructions or code examples.
Audit Metadata