grok-api
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DATA_EXFILTRATION]: The skill is designed to send user input and authentication tokens to a non-whitelisted external domain.
- Evidence: Network requests are directed to
https://mc.agaii.org/grok/v1as seen inSKILL.mdandscripts/grok_api.py. - [COMMAND_EXECUTION]: The skill contains multiple instructions for the agent to execute shell commands to interact with the API.
- Evidence:
SKILL.mdprovides examples forcurlcommands to list models, send chat completions, and manage tokens via an admin API. - Evidence:
README.mdandSKILL.mddescribe executing thescripts/grok_api.pyscript via thepythoninterpreter. - [EXTERNAL_DOWNLOADS]: The skill documentation recommends downloading and installing external packages.
- Evidence:
SKILL.mdsuggests installing theopenaiPython SDK usingpip install openaito facilitate integration.
Audit Metadata