poly-pizza-api
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate integration for the Poly Pizza API and contains no malicious code or instructions.- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of 3D models (GLB, FBX) from the poly.pizza CDN, which is consistent with its primary function of asset retrieval.- [CREDENTIALS_UNSAFE]: Authentication is handled securely by advising the use of the
POLY_PIZZA_KEYenvironment variable, avoiding the risk of hardcoded credentials.- [COMMAND_EXECUTION]: Python code snippets use the standardrequestslibrary for HTTP operations and implement basic path sanitization (replace(" ", "_")) when writing files to the local disk.
Audit Metadata