hackathon-api

Pass

Audited by Gen Agent Trust Hub on Mar 9, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses standard command-line tools (curl, jq) for their intended purpose of interacting with a REST API for hackathon management.
  • [SAFE]: Authentication is handled correctly through user-defined environment variables ($OATMEAL_KEY), and no hardcoded credentials or secrets were found.
  • [SAFE]: No evidence of prompt injection, obfuscation, persistence mechanisms, or unauthorized privilege escalation was detected.
  • [SAFE]: The skill documents a standard API interaction surface. (Ingestion points: API responses from $OATMEAL_URL processed via curl in SKILL.md; Boundary markers: None; Capability inventory: Network operations via curl and environment variable management; Sanitization: Data is handled as structured JSON for operational tasks).
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 9, 2026, 04:05 PM