profile-investigator
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlcommands to interact with the Lytics API (e.g.,https://api.lytics.io/api/entity/user/). These commands are used for legitimate profile lookup and segment diagnostics, which align with the skill's stated purpose. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to
api.lytics.io. This is the official API endpoint for the vendor 'lytics', and the requests are necessary for the skill's functionality. - [CREDENTIALS_UNSAFE]: The skill correctly references
LYTICS_API_TOKENas an environment variable rather than hardcoding credentials, following security best practices for secret management.
Audit Metadata