spellcheck
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides standard documentation and cURL examples for using the Brave Search Spellcheck API.
- [DATA_EXFILTRATION]: The skill documentation includes network requests to
api.search.brave.com. This domain is an official resource belonging to the author ('brave') and represents the intended functionality of the service. - [CREDENTIALS_UNSAFE]: The skill demonstrates secure practices by referencing an environment variable (
${BRAVE_SEARCH_API_KEY}) for authentication rather than hardcoding any sensitive API tokens. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided strings through the
qparameter. While this is a data ingestion surface, it is a necessary component of a spellcheck service and carries negligible risk within the documented scope.
Audit Metadata