create-project-with-grant

Pass

Audited by Gen Agent Trust Hub on Mar 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses curl to perform GET and POST requests to the Karma API for retrieving community data, program identifiers, and executing project creation.
  • [COMMAND_EXECUTION]: Employs python3 -c with static processing logic to parse and format JSON responses from the API into human-readable lists.
  • [EXTERNAL_DOWNLOADS]: Interacts with external endpoints on the karmahq.xyz domain (the author's official domain) to synchronize project and grant data with the Karma protocol.
  • [DATA_EXFILTRATION]: Transfers project details, grant descriptions, and funding amounts to the gapapi.karmahq.xyz endpoint. These operations require the KARMA_API_KEY which is retrieved from the environment as intended for authenticated protocol actions.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 3, 2026, 09:26 PM