constructive-meta-forms
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill dynamically constructs GraphQL query and mutation strings using table and field names retrieved from the system's metadata endpoint. This is a functional requirement for dynamic schema-driven UI and does not involve the execution of arbitrary system commands.
- [DATA_EXFILTRATION]: Authentication tokens and form data are sent to the CRM_ENDPOINT. This is the intended behavior for the tool's CRM management capabilities, and the endpoint is a vendor-managed resource.
- [SAFE]: The skill follows established security practices, such as using dedicated token management for authorization and implementing safe JSON parsing for user-provided data fields.
Audit Metadata