wnba-data
Pass
Audited by Gen Agent Trust Hub on Mar 9, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
sports-skillspackage from PyPI using standard pip commands. This is a common and expected practice for CLI-based skills. - [COMMAND_EXECUTION]: The skill uses a dedicated CLI tool (
sports-skills) to fetch sports data. The commands are structured, non-recursive, and do not involve shell piping or sensitive system modifications. - [CREDENTIALS_UNSAFE]: The documentation explicitly states that no API keys are required as it utilizes public ESPN endpoints. No hardcoded secrets were found in the scripts or markdown files.
- [PROMPT_INJECTION]: The instructions contain standard guidance for the AI on how to derive dates and choose seasons. There are no attempts to bypass safety filters or override system-level instructions.
- [DATA_EXFILTRATION]: No network operations to non-whitelisted or suspicious domains were detected. The skill's primary function is data retrieval from a known sports data provider.
Audit Metadata