Skills
skills/vm0-ai/vm0-skills/customer-io/Gen Agent Trust Hub

customer-io

Pass

Audited by Gen Agent Trust Hub on Apr 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard shell utilities including curl, jq, printf, and base64 to construct and execute API requests.
  • [EXTERNAL_DOWNLOADS]: The skill communicates with official Customer.io API endpoints (cdp.customer.io and api.customer.io) to send behavioral data and trigger messages.
  • [DATA_EXFILTRATION]: Data transmission is limited to the official infrastructure of the service described in the skill (Customer.io). It sends user profile information (email, traits) and event data as intended by the platform's functionality.
  • [CREDENTIALS_UNSAFE]: The skill correctly instructs the user to manage sensitive API keys and site IDs using environment variables (CUSTOMERIO_APP_TOKEN, CUSTOMERIO_TRACK_TOKEN, etc.), avoiding hardcoded secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 17, 2026, 04:43 PM
Security Audit — agent-trust-hub — customer-io