advanced-account-setup
Pass
Audited by Gen Agent Trust Hub on Apr 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell scripts (api.sh and signup.sh) and filesystem commands (find, dirname) to perform administrative setup tasks and resolve local paths.
- [EXTERNAL_DOWNLOADS]: Interacts with the vendor's official domain (api.openfunnel.dev) to synchronize account configurations and manage OAuth integrations.
- [DATA_EXFILTRATION]: Transmits user-provided setup data and authentication tokens to the vendor's infrastructure as intended for the skill's primary function.
- [CREDENTIALS_UNSAFE]: Stores API credentials in a local .env file created during the signup process. The skill implements security best practices by using wrapper scripts to keep these keys out of the agent's context and automatically updating .gitignore to prevent accidental disclosure.
Audit Metadata