a1-yandex-kit-orders
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to manage Yandex KIT store orders via a REST API. The provided scripts (
search_docs.mjsand the referencedvalidate.mjs) are designed for offline documentation lookup and schema validation using a bundled gzipped OpenAPI specification. The analysis confirmed that these scripts use only Node.js built-in modules (node:fs,node:url,node:zlib) and do not perform any hidden network requests or unauthorized file access. While the skill interacts with a remote API (https://api.kit.yandex.net), it does so through standard, user-initiated MCP tools or explicitly definedcurlcommands, which is consistent with its stated purpose. No obfuscation, persistence mechanisms, or privilege escalation patterns were detected.
Audit Metadata