evernote-install-auth
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructs the installation of official packages (
evernote) from trusted public registries (npm and PyPI), which is expected behavior for an integration skill.\n- [SAFE]: Credential management instructions follow security best practices by directing users to store sensitive API keys in a.envfile rather than hardcoding them directly into the application source code.\n- [SAFE]: The OAuth 1.0a flow implementation provided in the reference documentation uses standard patterns for request token acquisition and callback handling without any evidence of data exfiltration or malicious redirection.\n- [SAFE]: No obfuscation, prompt injection, or suspicious privilege escalation attempts were detected in the skill instructions or associated scripts.
Audit Metadata