kuroco-server-processing
Pass
Audited by Gen Agent Trust Hub on Mar 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive manual for the Kuroco platform. It contains no executable scripts, hidden commands, or malicious instructions. All analyzed content is purely instructional.
- [COMMAND_EXECUTION]: Documents the platform's native capabilities for making internal and external API calls via plugins like
api_internalandapi_request. These are presented as standard server-side processing features. - [DATA_EXFILTRATION]: Provides documentation for notification and integration plugins (e.g.,
sendmail,slack_post_message,github_deploy). These tools enable outbound data transfer as part of the platform's intended functionality for webhooks and batch processing. - [CREDENTIALS_UNSAFE]: Mentions API keys and tokens in documentation examples but follows security best practices by using descriptive placeholders or referencing the platform's built-in secret management system (
{secret}). - [REMOTE_CODE_EXECUTION]: Includes documentation for integrating with GitHub Actions and OpenAI. These integrations are presented as official platform features with guidance on secure implementation via the management interface.
Audit Metadata