zillow-search

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes documentation for setting an environment variable via the shell (export ZILLAPI_KEY="zk_..."). This is a standard and safe configuration step for managing API credentials and does not involve arbitrary command execution.
  • [DATA_EXFILTRATION]: The skill performs network requests to api.zillapi.com. This is the primary purpose of the skill as a search tool for the Zillapi service. The domain is associated with the vendor 'zeropointrepo' and the skill author 'Zero Point Studio'. No sensitive local files are accessed or transmitted.
  • [CREDENTIALS_UNSAFE]: The skill correctly instructs users to store their API key in an environment variable (ZILLAPI_KEY) rather than hardcoding it. The instructions provide a placeholder (zk_...) which is a safe practice.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 05:12 PM
Security Audit — agent-trust-hub — zillow-search