create-project-with-grant
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto perform GET and POST requests to the Karma API for retrieving community data, program identifiers, and executing project creation. - [COMMAND_EXECUTION]: Employs
python3 -cwith static processing logic to parse and format JSON responses from the API into human-readable lists. - [EXTERNAL_DOWNLOADS]: Interacts with external endpoints on the
karmahq.xyzdomain (the author's official domain) to synchronize project and grant data with the Karma protocol. - [DATA_EXFILTRATION]: Transfers project details, grant descriptions, and funding amounts to the
gapapi.karmahq.xyzendpoint. These operations require theKARMA_API_KEYwhich is retrieved from the environment as intended for authenticated protocol actions.
Audit Metadata