audit-intelligence
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill communicates with the Solodit API (api.solodit.xyz) to retrieve audit findings and similar vulnerability patterns. This network activity is documented and required for the skill's primary function.
- [CREDENTIALS_UNSAFE]: API authentication is managed through the SOLODIT_API_KEY environment variable. No hardcoded secrets or sensitive credentials were found in the source code or configuration files.
- [PROMPT_INJECTION]: The skill instructions and metadata were evaluated for bypass attempts or behavioral overrides; no prompt injection patterns were detected.
- [COMMAND_EXECUTION]: Scripts perform localized regex matching and API requests. There is no usage of dangerous functions like eval(), exec(), or subprocess calls for arbitrary command execution.
- [DATA_EXFILTRATION]: Network operations are restricted to the official Solodit API domain. There is no evidence of unauthorized data transfer to third-party or unknown servers.
Audit Metadata