datacommons-client
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS] (SAFE): The skill instructs the agent to install the
datacommons-clientpackage viauv pip. This is the official and verified library for interacting with the Data Commons API. - [DATA_EXFILTRATION] (SAFE): Network activity is restricted to
datacommons.organd its subdomains for the purpose of retrieving public statistical data. This behavior is consistent with the skill's stated purpose and does not involve the exfiltration of sensitive user data. - [CREDENTIALS_UNSAFE] (SAFE): The skill does not contain hardcoded API keys or secrets. It correctly documentation how to use the
DC_API_KEYvia environment variables or client initialization, which is a standard and secure practice for API clients. - [COMMAND_EXECUTION] (SAFE): The command line instructions provided in the documentation are limited to standard package installation commands.
Audit Metadata