zach-lingxing-openapi-client
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a standard OpenAPI client for the Lingxing ERP platform, correctly utilizing environment variables for secret management.
- [SAFE]: Analyzed 199 files, including extensive API documentation and administrative scripts; no instances of prompt injection, data exfiltration, or obfuscated malicious code were found.
- [SAFE]: Base64 encoded strings found in documentation files (e.g., in
BasicData_AttachmentDownload.md) are mock data representing images and documents, which is expected behavior for an API client's documentation. - [SAFE]: The signature generation process involving AES/ECB/PKCS5PADDING is performed using system
opensslas described in the official ERP documentation, with no evidence of side-channel exfiltration.
Audit Metadata