letta-configuration
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [CREDENTIALS_UNSAFE] (SAFE): No hardcoded secrets or sensitive keys were detected. The skill consistently utilizes descriptive placeholders such as 'your-api-key', 'sk-your-openai-key-here', and 'gsk_...' in all configuration examples and scripts.\n- [COMMAND_EXECUTION] (SAFE): The skill's Python and TypeScript scripts perform legitimate tasks such as making REST API calls and generating local configuration files. No instances of arbitrary command execution or unsafe shell injection patterns were found.\n- [DATA_EXFILTRATION] (SAFE): There is no evidence of unauthorized data collection or exfiltration. Network requests in the validation and setup scripts are directed toward the user-specified Letta server (defaulting to localhost) for administrative purposes.\n- [EXTERNAL_DOWNLOADS] (SAFE): The skill does not involve downloading or executing remote scripts. It relies on standard, verifiable package dependencies for its functionality.
Audit Metadata