felo-search

Pass

Audited by Gen Agent Trust Hub on Mar 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to verify environment variables and execute curl commands.
  • It creates a temporary file at /tmp/felo_query.json to store the user's search query.
  • It uses a quoted heredoc ('EOF') which prevents shell variable expansion or command substitution within the query content during file creation.
  • [EXTERNAL_DOWNLOADS]: The skill communicates with the vendor's official API endpoint at https://openapi.felo.ai/v2/chat to retrieve search results and AI-generated responses.
  • [CREDENTIALS_UNSAFE]: The skill requires a FELO_API_KEY to be set as an environment variable. This is the standard and recommended way for AI agents to handle authentication for external services, avoiding hardcoded secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 13, 2026, 05:22 AM