complete-milestone
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
curlcommands to interact with the Karma protocol API. It uses inlinepython3scripts to parse JSON output from these requests, which is a standard method for data processing within agent skills. - [EXTERNAL_DOWNLOADS]: All network traffic is directed to
https://gapapi.karmahq.xyz, the official API endpoint for the Karma protocol. These interactions are necessary for the skill's core functionality of managing project milestones. - [DATA_EXFILTRATION]: The skill uses the
KARMA_API_KEYenvironment variable for authentication. This sensitive data is only transmitted to the verified vendor API endpoint.
Audit Metadata