NYC

datacommons-client

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS] (SAFE): The skill instructs the agent to install the datacommons-client package via uv pip. This is the official and verified library for interacting with the Data Commons API.
  • [DATA_EXFILTRATION] (SAFE): Network activity is restricted to datacommons.org and its subdomains for the purpose of retrieving public statistical data. This behavior is consistent with the skill's stated purpose and does not involve the exfiltration of sensitive user data.
  • [CREDENTIALS_UNSAFE] (SAFE): The skill does not contain hardcoded API keys or secrets. It correctly documentation how to use the DC_API_KEY via environment variables or client initialization, which is a standard and secure practice for API clients.
  • [COMMAND_EXECUTION] (SAFE): The command line instructions provided in the documentation are limited to standard package installation commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:24 PM