jules
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto interact with the Jules REST API. The commands follow standard RESTful patterns for resource management (GET, POST, DELETE) without any unsafe shell interpolation or parameter injection risks. - [CREDENTIALS_UNSAFE]: Access tokens are managed correctly via the
JULES_API_KEYenvironment variable passed in headers. There are no hardcoded credentials or instructions that encourage unsafe secret storage. - [EXTERNAL_DOWNLOADS]: All network requests are directed to
jules.googleapis.com. This is a well-known service from Google, and the skill behaves as a standard API client without downloading or executing untrusted code.
Audit Metadata