openhands-api
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's clients (
scripts/openhands_api.pyandscripts/openhands_api.ts) communicate with the official OpenHands Cloud API athttps://app.all-hands.dev. This communication is a core functional requirement and targets the vendor's known infrastructure. - [COMMAND_EXECUTION]: A CLI utility is provided in
scripts/openhands_api.pywhich allows the agent or user to initiate conversations and poll for status updates via the command line. - [SAFE]: The skill correctly handles sensitive information by retrieving the
OPENHANDS_API_KEYfrom environment variables rather than hardcoding credentials. No malicious code, obfuscation, or persistence mechanisms were detected.
Audit Metadata