aeon-api
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No prompt injection, DAN patterns, or safety bypass instructions were found in the skill content.
- [DATA_EXPOSURE]: No hardcoded secrets or sensitive file paths were detected. API keys are correctly represented using placeholders such as
<api-key>andyour-api-key-here. - [EXTERNAL_DOWNLOADS]: The skill uses
curland the Pythonrequestslibrary to interact withhttps://cloud.yugabyte.com/api/v1. These operations are consistent with the skill's stated purpose and target the author's own official infrastructure. - [COMMAND_EXECUTION]: The skill provides example
bashandjqcommands for querying the API. These are standard administrative scripts and do not involve unsafe command construction or remote code execution. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the YugabyteDB Aeon API. While this constitutes an external data source, the risk is minimal as it originates from the vendor's managed service, and the skill uses structured parsing (JSON/jq) without unsafe interpolation into agent prompts.
- [OBFUSCATION]: No hidden content, encoded strings, zero-width characters, or homoglyph attacks were identified in the files.
Audit Metadata