holded
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and examples for using the Apideck HRIS API with the 'holded' service identifier. All instructions follow standard development practices for API integration.
- [EXTERNAL_DOWNLOADS]: The skill references official Apideck domains (apideck.com, developers.apideck.com, specs.apideck.com) for documentation, images, and OpenAPI specifications. These are well-known service domains associated with the skill's authoring organization.
- [CREDENTIALS_UNSAFE]: The skill correctly instructs users to manage sensitive credentials (API keys) using environment variables (
process.env.APIDECK_API_KEY) or the Apideck Vault managed service, which is a security best practice for secret management. - [COMMAND_EXECUTION]: Example commands use
curlto demonstrate legitimate API interactions with Apideck's unified API endpoint (unify.apideck.com). These commands do not involve piping to shells or executing untrusted scripts.
Audit Metadata