pyrofork-api-full-reference

Pass

Audited by Gen Agent Trust Hub on Feb 25, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill consists of static documentation files extracted from the Pyrofork repository. No malicious instructions, prompt injections, or obfuscated payloads were found in any of the reference files.
  • [COMMAND_EXECUTION]: The included generator script generate_pyrofork_api_skill.py uses subprocess.check_output to execute git rev-parse HEAD. This is used solely for metadata purposes to track the version of the source code being documented and does not pose a security risk.
  • [CREDENTIALS_UNSAFE]: The documentation for the Client class and storage modules contains examples of parameters such as api_id, api_hash, bot_token, and mongodb://. These values are clearly identifiable placeholders (e.g., "0123456789abcdef...") and do not represent the exposure of real sensitive credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 25, 2026, 07:58 PM