skills/unopim/agent-skills/unopim-api/Gen Agent Trust Hub

unopim-api

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a technical manual for API development within the UnoPim ecosystem. It contains architectural guidance and code snippets that adhere to standard Laravel security practices.- [SAFE]: Authentication is handled through Laravel Passport, and the skill provides instructions for managing OAuth keys securely. It correctly identifies storage/app/private/oauth as the location for RSA keys.- [SAFE]: The authorization model described is "fail-closed," meaning endpoints are denied by default unless an explicit ACL entry is created. This is a strong security posture.- [SAFE]: Data validation is enforced through ApiFormRequest classes, and the ApiDataSource implementation for listings uses an explicit mapping for filters to prevent SQL injection or unauthorized data access.- [SAFE]: References to external commands (e.g., artisan, pest) are contextualized within a standard development workflow and are intended for use via the unopim-exec helper, which is a common pattern for this vendor.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 09:39 AM