newapi-admin
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Node.js script (
scripts/api.js) to perform administrative tasks on a NewAPI backend. - [CREDENTIALS_UNSAFE]: The skill manages authentication credentials via an environment file (
.env). It includes a robust masking function that redacts common sensitive patterns (e.g.,sk-,session=,Bearer) and specific JSON keys (e.g.,password,token,access_token) from the API responses before they are presented to the agent. - [DATA_EXFILTRATION]: Network operations are restricted to the user-configured NewAPI base URL. No evidence was found of unauthorized data transmission to external domains.
- [REMOTE_CODE_EXECUTION]: The skill uses standard Node.js built-in modules and does not download or execute untrusted external code or packages.
Audit Metadata