seren-bounty
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate implementation of the Seren Bounty affiliate workflow. Analysis of the instructions and examples revealed no malicious patterns or security risks.
- [EXTERNAL_DOWNLOADS]: The skill documentation describes API interactions with
api.serendb.com, which is the official domain for the service. These operations are restricted to the primary function of bounty management. - [COMMAND_EXECUTION]: The skill provides
curlcommand examples to illustrate API usage. These are standard documentation practices and do not involve the execution of untrusted or arbitrary code. - [CREDENTIALS_UNSAFE]: Authentication instructions utilize the
$SEREN_API_KEYenvironment variable, which is a secure method for managing secrets and prevents hardcoding credentials.
Audit Metadata