pyrofork-api-full-reference
Pass
Audited by Gen Agent Trust Hub on Feb 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill consists of static documentation files extracted from the Pyrofork repository. No malicious instructions, prompt injections, or obfuscated payloads were found in any of the reference files.
- [COMMAND_EXECUTION]: The included generator script
generate_pyrofork_api_skill.pyusessubprocess.check_outputto executegit rev-parse HEAD. This is used solely for metadata purposes to track the version of the source code being documented and does not pose a security risk. - [CREDENTIALS_UNSAFE]: The documentation for the
Clientclass and storage modules contains examples of parameters such asapi_id,api_hash,bot_token, andmongodb://. These values are clearly identifiable placeholders (e.g., "0123456789abcdef...") and do not represent the exposure of real sensitive credentials.
Audit Metadata