x-research
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto interact with the xAI API andjqto parse JSON responses. These commands are necessary for the skill's primary research function and do not pose a security risk.\n- [EXTERNAL_DOWNLOADS]: The skill connects tohttps://api.x.ai/v1/responses. This is the official and well-known API endpoint for xAI's Grok service, as documented in the skill's references.\n- [SAFE]: No malicious patterns such as prompt injection, obfuscation, privilege escalation, or persistence mechanisms were found. The skill correctly implements credential management by requiring theXAI_API_KEYto be set as an environment variable rather than hardcoded.
Audit Metadata