evernote-install-auth
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the official
evernoteSDK from standard package registries (npm and pip). The skill also references documentation and source code from Evernote's official domains and GitHub repositories. - [COMMAND_EXECUTION]: Employs shell commands to install dependencies and initialize a local
.envfile for configuration. These operations are standard for development environment setup and do not involve untrusted remote execution. - [CREDENTIALS_UNSAFE]: Mentions API keys and secrets using non-functional placeholders such as
your-consumer-key. It correctly instructs the user to manage these credentials via a local environment file rather than hardcoding them in the application logic. - [SAFE]: No malicious behavior, obfuscation, or unauthorized data access patterns were identified. The skill's functionality aligns with its stated purpose of configuring a legitimate third-party integration.
Audit Metadata