lightspeed
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and examples for using the Apideck unified API to interact with Lightspeed. All external links point to official developer documentation (Apideck and Lightspeed) and trusted vendor infrastructure.
- [CREDENTIALS_UNSAFE]: The skill follows security best practices by recommending the use of environment variables (
process.env.APIDECK_API_KEY) and managed OAuth via Apideck Vault rather than hardcoding credentials. - [DATA_EXFILTRATION]: Network operations are restricted to the vendor's own API (
unify.apideck.com) and the official Lightspeed API. No patterns of data exfiltration or unauthorized file access were detected. - [INDIRECT_PROMPT_INJECTION]: While the skill describes an integration that processes external data (orders, products, customers), it does not include instructions that would bypass safety filters or execute untrusted commands. The surface for indirect injection is minimal and consistent with the skill's primary purpose.
Audit Metadata