skills/xgent-ai/skills/portal-logging/Gen Agent Trust Hub

portal-logging

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [SAFE]: The skill adheres to security best practices by utilizing platform-injected environment variables (e.g., SA_CLIENT_ID, SA_CLIENT_SECRET) for service authentication, avoiding the risk of hardcoded credentials.
  • [SAFE]: Documentation explicitly cautions against logging sensitive data such as tokens, passwords, and personally identifiable information (PII), which is critical for maintaining data privacy and security.
  • [COMMAND_EXECUTION]: The provided utility script scripts/smoke-ingest.sh uses curl to interact with the observability API for diagnostic purposes. This behavior is transparent, user-initiated, and restricted to the intended logging functionality.
  • [DYNAMIC_EXECUTION]: In the smoke-ingest.sh script, a helper function jget uses Python's eval() to parse JSON results. While eval() is a dynamic execution pattern, its use here is limited to processing structured data with static access paths defined within the script itself.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 03:32 PM
Security Audit — agent-trust-hub — portal-logging