xpoz-getting-started
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches a trial access token from the official Xpoz API (api.xpoz.ai). This is a standard authentication step for the service.
- [COMMAND_EXECUTION]: Uses basic shell commands (
curl,export,pip install,npm install) to facilitate setup of the Xpoz SDKs and CLI. These are common developer workflows. - [CREDENTIALS_UNSAFE]: Includes instructions for the user to provide their own API key and correctly advises setting it as an environment variable (
XPOZ_API_KEY) or passing it to the constructor. It does not contain hardcoded secrets or unsafe storage practices. - [REMOTE_CODE_EXECUTION]: Instructs on the installation of official vendor packages (
xpoz,@xpoz/xpoz,xpoz-cli) from public registries. These resources are consistent with the skill author's identity.
Audit Metadata