ai-agent
Pass
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues or malicious patterns were detected. The skill contains legitimate documentation and multi-language code examples for managing AI agents, flows, tools, and knowledge bases.
- [CREDENTIALS_UNSAFE]: The skill demonstrates secure handling of sensitive credentials. All code examples use environment variable access (e.g.,
process.env.PROVIDER_API_KEY,os.environ,ENV,getenv) for API keys and webhook secrets instead of hardcoding them. - [COMMAND_EXECUTION]: There are no shell commands, system calls, or instructions that would lead to arbitrary command execution on the host environment.
- [DATA_EXFILTRATION]: No data exfiltration patterns were identified. Network activity is limited to standard interactions with the Zavu API and user-configured webhooks for tool execution.
Audit Metadata