felo-search
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Bash tool to verify environment variables and execute
curlcommands. - It creates a temporary file at
/tmp/felo_query.jsonto store the user's search query. - It uses a quoted heredoc (
'EOF') which prevents shell variable expansion or command substitution within the query content during file creation. - [EXTERNAL_DOWNLOADS]: The skill communicates with the vendor's official API endpoint at
https://openapi.felo.ai/v2/chatto retrieve search results and AI-generated responses. - [CREDENTIALS_UNSAFE]: The skill requires a
FELO_API_KEYto be set as an environment variable. This is the standard and recommended way for AI agents to handle authentication for external services, avoiding hardcoded secrets.
Audit Metadata