paylocity
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses environment variables (
process.env.APIDECK_API_KEY,process.env.APIDECK_APP_ID) to manage credentials, which is a security best practice to avoid hardcoding secrets. - [SAFE]: The documentation explicitly instructs the agent to use Apideck's managed OAuth flow ('Apideck Vault') and states that the agent should never ask users for API keys or tokens directly, reducing the risk of credential exposure.
- [SAFE]: All external references and network operations (e.g.,
unify.apideck.com,specs.apideck.com,developer.paylocity.com) point to official and well-known service provider domains associated with the skill's stated purpose.
Audit Metadata