voice-agent
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The documentation references the use of the
zavuCLI tool for managing agents, deploying functions, and viewing call logs. These are standard administrative actions for the Zavu platform. - [EXTERNAL_DOWNLOADS]: The guide instructs users to install the
@zavudev/functionspackage via NPM. This is a vendor-owned package required for the agent's functionality. - [CREDENTIALS_UNSAFE]: The code examples correctly demonstrate the use of environment variables (
process.env.SENDER_ID) and secret management commands (zavu fn secrets set) rather than hardcoding credentials. - [DATA_EXFILTRATION]: No evidence of unauthorized data exfiltration was found. Network operations (using
fetch) are shown within tool handlers as generic examples for interacting with external APIs (e.g.,api.example.com).
Audit Metadata