aeon-api

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No prompt injection, DAN patterns, or safety bypass instructions were found in the skill content.
  • [DATA_EXPOSURE]: No hardcoded secrets or sensitive file paths were detected. API keys are correctly represented using placeholders such as <api-key> and your-api-key-here.
  • [EXTERNAL_DOWNLOADS]: The skill uses curl and the Python requests library to interact with https://cloud.yugabyte.com/api/v1. These operations are consistent with the skill's stated purpose and target the author's own official infrastructure.
  • [COMMAND_EXECUTION]: The skill provides example bash and jq commands for querying the API. These are standard administrative scripts and do not involve unsafe command construction or remote code execution.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the YugabyteDB Aeon API. While this constitutes an external data source, the risk is minimal as it originates from the vendor's managed service, and the skill uses structured parsing (JSON/jq) without unsafe interpolation into agent prompts.
  • [OBFUSCATION]: No hidden content, encoded strings, zero-width characters, or homoglyph attacks were identified in the files.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 12:57 PM