find-funding-opportunities
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto interact with the Karma API anduuidgento create unique invocation identifiers for tracking. These operations are essential for the skill's core functionality and are executed with appropriate parameters for a public API. - [EXTERNAL_DOWNLOADS]: Requests are made to
gapapi.karmahq.xyzto fetch program data and community lists. This is a legitimate vendor resource associated with the skill's stated purpose. - [DATA_EXFILTRATION]: While the skill uses tracking headers (
X-Source,X-Invocation-Id,X-Skill-Version), these are standard for API telemetry and do not involve the transmission of sensitive user data or system credentials.
Audit Metadata