patents-search
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to
https://api.valyu.ai/v1to perform patent searches. This is the primary function of the skill and targets a specific service provider. - [COMMAND_EXECUTION]: The skill utilizes a shell script wrapper (
scripts/search) to execute a Node.js script. This is a standard pattern for providing CLI tools within a skill and does not involve arbitrary command execution. - [CREDENTIALS_SAFE]: The skill handles API keys by checking the
VALYU_API_KEYenvironment variable or reading from~/.valyu/config.json. It includes asetupcommand to save the key locally. This follows best practices for local secret management and does not hardcode or exfiltrate credentials.
Audit Metadata