seren-bounty

Pass

Audited by Gen Agent Trust Hub on May 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a legitimate implementation of the Seren Bounty affiliate workflow. Analysis of the instructions and examples revealed no malicious patterns or security risks.
  • [EXTERNAL_DOWNLOADS]: The skill documentation describes API interactions with api.serendb.com, which is the official domain for the service. These operations are restricted to the primary function of bounty management.
  • [COMMAND_EXECUTION]: The skill provides curl command examples to illustrate API usage. These are standard documentation practices and do not involve the execution of untrusted or arbitrary code.
  • [CREDENTIALS_UNSAFE]: Authentication instructions utilize the $SEREN_API_KEY environment variable, which is a secure method for managing secrets and prevents hardcoding credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
May 7, 2026, 07:21 AM