hackathon-api
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses standard command-line tools (
curl,jq) for their intended purpose of interacting with a REST API for hackathon management. - [SAFE]: Authentication is handled correctly through user-defined environment variables (
$OATMEAL_KEY), and no hardcoded credentials or secrets were found. - [SAFE]: No evidence of prompt injection, obfuscation, persistence mechanisms, or unauthorized privilege escalation was detected.
- [SAFE]: The skill documents a standard API interaction surface. (Ingestion points: API responses from
$OATMEAL_URLprocessed viacurlinSKILL.md; Boundary markers: None; Capability inventory: Network operations viacurland environment variable management; Sanitization: Data is handled as structured JSON for operational tasks).
Audit Metadata